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Abstract 

Motivated by model-theoretic properties of the Bernays- 
Schonfinkel-Ramsey (BSR) class, we present a family of 
semantic classes of FO formulae with finite or co-finite 
spectra over a relational vocabulary E. A class in this 
family is denoted EBS^ (a), where a C E. Formulae 
in EBSs (a) are preserved under substructures modulo a 
bounded core and modulo re-interpretation of predicates in 
E \ a. We study several properties of the family £BS-£ = 
{EBSs(ct) I a C E}. For example, classes in EBSy, are 
spectrally indistinguishable, the smallest class, EBSs(E), 
is semantically equivalent to BSR over E, and the largest 
class, EBSs(0), is the set of all FO formulae over E with 
finite or co-finite spectra. Furthermore, (SBSs, C) forms a 
lattice that is isomorphic to the powerset lattice (p(E), C). 
We also show that if E contains at least one predicate of 
arity > 2, there exist semantic gaps between EBSe(iTi) 
and EBSj](<72) if o\ 7^ o~i- This gives a natural seman- 
tic generalization of BSR as ascending chains in the lattice 
(SBSv, C). 

We study the semantic relationship of the EBSs (a) classes 
with other fragments of FO, and observe that many well- 
known classes are semantically subsumed by EBSs(E) or 
EBSs(0). This study also provides alternative proofs of 
some interesting results like the Los-Tarski Theorem and the 
semantic subsumption of the Lowenheim class with equality 
by BSR. 

We show that the membership problem for each class in 
£BSs is undecidable. As a step towards syntactically char- 
acterizing fragments o/EBSs((t), we present a syntac- 
tic sub-class o/EBSs(a) called EDPs(cr) and give an 
expression for the size of the bounded cores of models of 
EDPx(c) formulae. Using this, we characterize the com- 
plexity of the satisfiability problem for EDPj (a). We show 
that the EDPs(cr) classes also form a lattice structure. Fi- 
nally, we study some closure properties and applications of 
the classes presented. 



1 Introduction and Preliminaries 

The Bernays-Schonfinkel-Ramsey class (henceforth called 
BSR) is a widely used decidable class of first order logic 
sentences 0J. Several recent works have addressed the 
problem of efficiently checking satisfiability of BSR for- 
mulae in practice Q. Motivated by the increasing interest 
in BSR formulae in recent times, we consider the problem 
of generalizing this class both in a semantic and syntactic 
sense, while retaining decidability of satisfiability checking. 
In doing so, we would like to exploit advances in decision 
procedures for BSR to answer corresponding questions for 
formulae in these more general classes 
Preliminaries: We represent a tuple of variables 
(xi,x-2, • • • x n ) using the shorthand x. A first order logic 
(henceforth called FO) formula tp(xi, X2, ■ ■ ■ x n ) with free 
variables xi, x%, . . . x„ is represented as <p(x) for nota- 
tional convenience. A sentence is a formula without any 
free variables. The signature or vocabulary of a formula is 
the set of all function and predicate symbols that appear in 
the formula. It is well known that functions are "syntactic 
sugar" in first-order logic. Specifically, for every formula ip 
with a fc-ary function /, there is an equisatisfiable formula 
tp with a (k + l)-ary predicate Pf, such that the models of 
if are in one-to-one correspondence with the models of ip. 
Hence, for the remainder of our discussion, we will assume 
without loss of generality that the vocabulary is relational, 
i.e. has only predicate symbols. The set of all FO sentences 
over the vocabulary E with equality as a special interpret- 
ted predicate (the interpretation always being the identity 
relation) is denoted FOs. When we talk about FO over 
the vocabulary E without equality as a special interpretted 
predicate, we will explicitly refer it to it as 'FOs without 
equality'. The set of all BSR sentences over E is denoted 
BSRs. A formula tp(x\,X2, ■ ■ ■ x n ) is said to be in prenex 
conjunctive normal form (PCNF) if it has the syntactic 
form Q12/1Q22/2 ■■■QkUk (t>(yi,y2,---yk,xi,X2,...x n ), 
where each Q { 6 {V, 3} and <f>(yi, y 2 , ■ . . j/fc, xi, x 2 , ■ . . x n ) 
is a conjunction of clauses, with each clause being a disjunc- 
tion of literals, and each literal being either an instance of 



a predicate or its negation. It is well known that every FO 
formula is semantically equivalent to one in PCNF. Hence, 
we will focus our attention only on PCNF formulas. Since 
the satisfiability question for a FO formula can be reduced 
to the satisfiability of a corresponding FO sentence, we will 
focus only on FO sentences in the sequel. 
Given a relational vocabulary E, a ^.-structure M consists 
of a universe ( or domain ) of elements Um, and an interpre- 
tation P AI of every predicate P 6 E. The interpretation 
of a /c-ary predicate over Um is a subset of (Um) u , giving 
all the tuples in (Uhi) k for which P M evaluates to True. 
Given a sentence ip over the vocabulary E, a E-structure M 
is said to be a model of ip, denoted M \= ip, if ip evaluates 
to True when evaluated over M. If M is a E-structure, the 
substructure M ' of M generated by Um 1 Q Um consists 
of the universe Um' an d the restriction of the interpretation 
P M of each predicate P on Um' ■ Given two E-structures 
Mi and M2 with the same universe, and a set of predicates 
a C S, we say that M\ | CT = M2 \ a if the interpretation of 
all predicates in a are the same in M\ and M2 

Consider a FO sentence <p in PCNF. It is well known that 
if the quantifier prefix of ip consists of only V quantifiers 
(such sentences are called V* sentences), then vp is pre- 
served in substructures. In other words, if M \= ip and 
if M' is a substructure of M, then M' \= ip as well. The 
Los-Tarski theorem |2| states that the converse also holds, 
i.e. every FO sentence that is preserved in substructures 
is semantically equivalent to a V* sentence. Generalizing 
the syntactic requirements, if we allow the quantifier prefix 
to be a string in 3*V*, we get a sentence in the Bernays- 
Schonfinkel-Ramsey (BSR) class, also called the Effec- 
tively Propositional (EPR) class. Let B denote the length 
of the 3* prefix of (p. It is not hard to see that tp is preserved 
in substructures modulo a bounded "core". Specifically, if 
M \= ip, then there exists a "core" Vm Q Um containing at 
most B elements such that every substructure M 1 of M that 
contains Vm is also a model of <p(&). The equivalent of the 
Los-Tarski theorem for BSR can also be obtained, and will 
be discussed in SectionfJ] 

It follows from the above discussion that every 3*V* sen- 
tence has either finite or co-finite spectrum. The converse, 
however, is not true. Indeed, there exist FO sentences with 
co-finite spectra that neither belong to BSR nor are pre- 
served under substructures modulo a bounded core. For ex- 
ample, consider ip = Vx3yP(x,y). The spectrum of xp 
is the entire set of natural numbers, and is hence co-finite. 
Yet, ip is neither in BSR, nor is it preserved in substruc- 
tures modulo a bounded core. A natural question to ask, 
therefore, is whether the syntactic class BSR or the se- 
mantic property of "preservation in substructures modulo 
a bounded core" can be generalized in a natural way to de- 
scribe the set of all FO sentences with finite or co-finite 
spectra in the limit. Such a generalization can be quite use- 



ful in the study and application of fragments of FO witfi 
finite or co-finite spectra (the widely used BSR class being 
just one of them). From a theoretical standpoint, this study 
can facilitate a better understanding of the semantic relation 
between fragments of FO with finite or co-finite spectra. 
It can also provide insights into how small models of for- 
mulae belonging to certain fragments can be constructed. 
Since the satisfiability problem for every fragment of FO 
with finite or co-finite spectra is decidable, identifying syn- 
tactic fragments with such spectral properties is useful in 
practical applications as well. 

The primary contributions of this paper are as follows. We 
present a parameterized generalization of the "preservation 
in substructures modulo a bounded core" property that gives 
us progressively more expressive fragments of FO with fi- 
nite or co-finite spectra, culminating in the set of all FO 
sentences with finite or co-finite spectra in the limit. We 
show that a large number of known decidable fragments 
of FO can be located within the fragments of this gener- 
alization. We also provide a parameterized syntactic gen- 
eralization of BSR that gives us progressively more ex- 
pressive fragments of FO starting from BSR. There has 
been recent work ((8)) on extending BSR to order-sorted 
logic. Our syntactic generalization is an unsorted logic and 
is orthogonal to the work in 0. We study the relation 
between this syntactic generalisation and the parametrized 
semantic generalisation mentioned above. We show that the 
syntactic generalization enjoys special spectral properties 
that lends itself to interesting applications like SMT solving 
and bounded model checking where BSR has been hitherto 
used. 

2 TheEBS s (a) class 

Definition 1 (The EBSs(cr) class) Let ip be an FOs sen- 
tence. Then ip is said to have the Extensible Bounded Sub- 
Model property preserving a C E if the following holds: 
There exists a least finite cardinal B (called the bound for 
ip - dependent on ip and a in general) such that for every 
E— structure M, if M \= ip, then there exists a sub-structure 
Mi of M such that 

1. \U Ml I < B 

2. For every extension M 2 of M\ within M, there exists a 
E— structure M' 2 such thatlAu^ = Um', M% |= ip and 
M' 2 \ a = M 2 | CT . 

The set of all FOs sentences having the extensible bounded 
sub-model property preserving a is called the EBSs(er) 
class. 

We will encounter examples of formulae in the above fam- 
ily of classes in the forthcoming sections. We organize our 



study of EBSs(cr) into three parts in the sequel: (a) The 
case when a — E (b) The case when a is not necessarily 
restricted to E (c) The case when a = 0. 

3 EBS E (£) as a semantic characterization of 

BSR E 

Theorem 1 A sentence <p € EBSs(E) iff there exists a 
sentence ip G BSRs equivalent to (p. 

Proof: 

Given a BSRs sentence ip, from the proof of the small 
model property of BSRs as given in (2|, it can be seen 
that ip G EBSs(E) with bound B being atmost the number 
of existential quantifiers of ip. Then since EBSs(E)is a 
semantic clss, if ip is equivalent to <p, then <p> also belongs to 
EBS S (E). 

Consider <p G EBS S (E) in PCNF. W.l.o.g. let 

<p = Vzo3u 1 Vz 1 3w 2 Vz2 . . . 3v r Vz r £;(z, v\ . . . , v r ) 

where z = (zo,...,z r ) and £ is quantifier- free. Let 
Sx be the set of variables of z. Introduce fresh vari- 
ables xi,...,xb where B is the bound for <p and let 
V = {x\, ■ • ■ , xb} U Sz. Consider ip as below. 

^ = 3xi . . . B.tsVzoVzi . . . Vz r (x) where 

X = (V Mie y-V„ r ev£( z > u i ^ "!)■•• .Wrl-^Wr)) 
Here £(z, vi t— > ux, . . . , u r >-> w r ) is the formula obtained 
by replacing every occurence of Wj in £ by itj. 
If M \= (f> and |£Ym < B, then assign values to x\ . . . xb 
such that each a G 14m is assigned to some x,. Con- 
sider an instantiation Z of z from Wm- Since M \= <p, 
there exist values d\ , . . . , d r for «x , . . . , v r such that M \= 
£(Z, d%, . . . , d r ). Each di is the value assigned to some 
Ui G {xi, . . . , xb}- Then M \= £,(Z, vi \-> Ui, . . . , v r M> 
u r ) and so M \= x- Since Z was arbitrary, AI \= ip. 
If M |= <j> and > B, then there exists Mx C M 

satisfying the EBSe(E) conditions. Assign values to 
xi . . . xb s.t. each xi is assigned some a G Um x and each 
a G Um x is assigned to some Xj . Consider an instantiation 
Z of z. Let the set of elements of Z be T. Then consider 
the substructure M2 of M generated by U T. Since 
Mx C M 2 C M, M 2 |= 0. Then there exist values 
di, . . . , d r for vx, . . . ,v r such that M 2 |= £{Z, di 7 . . . , d r ). 
Observe that since M 2 Q M, M \= \{Z, d x , . . . , d r ). 
Now since d, G Umx U 7"> is me value assigned 
to some Ui G V. Then since M \= £(Z, di, . . . , d r ), 
M \= £(Z, vi i-> itx, . . . , v r t— > u r ) and so M |= \- Since 
Z was arbitrary, M \= ip. 

Now suppose M \= ip. Then there exists a set of values 
S C such that the Xj's in ^ get their values from this 
set and for all instantiations from Um of z, M (= Then 



consider the instantiation Z of z. Since M |= x f° r Z, ther^ 
exists some disjunct £(Z, vi m; . . . ; v r M> u r ) which is 
True in M. Now Ui G V and hence is either some Xj or 
a universal variable z. Then if is Xj, let d,; be the value 
(from S) assigned to Xj. If U{ is the variable z, let dj be 
the value assigned to z in Z. Then M |= £(Z, dx • • • , d r ). 
Then for the instantiation Z, choosing vi = di, we see that 
the matrix of <p becomes True in M. Doing likewise for all 
instantiations of z, we conclude that M \= (p. 
From the above then, M (= <p -H- M (= V i- e - is 
equivalent to ^, the latter being a sentence in BSRj> ■ 

Some consequences of Theorem [I] 

1. Los-Tarski Theorem as a special case: Consider the 
class of FOs sentences <fi which are preserved under 
substructures. Then we can see that <j> G EBSs(E) 
with B = 0. Then from the proof of the Theorem Q] 
we can see that <fi is equivalent to a BSRs sentence 
ip where the number of existential quantifiers is 0. In 
other words <p is equivalent to a V* sentence. The con- 
verse, namely, that a V* sentence is closed under sub- 
structures is well-known. We thus get the Los-Tarski 
Theorem as a special case of Theorem Q] The proof 
of Theorem Q] serves as an alternate proof of the Los- 
Tarski Theorem. 

The EBSs(E) property can be viewed as preserva- 
tion under substructures modulo a bounded 'core' i.e. 
all substructures of a model which contain the core of 
the model are also models. The 3* quantifiers in the 
equivalent BSRs formula of an EBSs(E) formula 
can be seen to assert the existence of a bounded exten- 
sible core. 

2. BSRs semantically subsumes other classes: Theo- 
rem Q] helps to show right away that some classes of 
FOs formulae are semantically contained in BSR^. 
The Lowenheim class is the class of all FOs sen- 
tences over E, without equality where E contains only 
unary predicates. The Lowenheim class with equality 
- denoted Ls - is the class of all FOj sentences over 
E, possibly containing equality where E contains only 
unary predicates (Whenever we will talk about just the 
Lownheim class, we will refer to it as 'Ls without 
equality'). By an Ehrenfeucht-Frai'sse game argument 
(see 0, pp. 259), one can show that if <p G Ls, then 
(p G EBS S (E) with the bound B = q ■ 2 m where q 
is the length of the quantifier prefix of <p and m is the 
number of unary predicates (m = |E|). By theoremQ] 
we immediately know that for <p, there is an equivalent 
BSRs sentence ip whose number of existential quan- 
tifiers is B. Since E contains only unary predicates, 
this shows us that Ls is semantically the same as the 



BSRs class, the latter being a proper syntactic subset 
of the former. 

Other known classes which can be seen to be sub- 
sumed semantically by BSRs include FOs[l] and 
FOs[l] with counting which are respectively the class 
of FOs sentences having only one variable and the 
class of FOs sentences with counting having only one 
variable. These are contained inside Ls and hence are 
semantically within BSR^. 

3. Translation from EBSs(E) to BSRs." The proof not 
only shows us that for a sentence <p G EBSs (£), there 
exists an equivalent BSRs sentence, but also gives us 
the sentence (ip in the proof). It gives a uniform trans- 
lation scheme from the whole of EBSs(E) to BSRs- 
As for the size of ip, the number of 3 variables is B, the 
number of V variables is atmost k + 1 where k is the 
number of V variables in <j> and the size of the matrix is 
0{{B + k + l) r ■ |f |) where |f | is the length of f and 
where r (number of existential quantifiers) and f are as 
in the proof. 

4. Optimal translation: The proof also shows us that for 
a sentence <f> G EBSs(E) whose bound is B, there 
cannot exist an equivalent BSRs sentence with B' 3 
quantifiers where B' < B. Otherwise, we would vio- 
late the minimality of B. 

5. Finding the bound B: EBSs(S) is exactly the class of 
all those sentences which are equivalent to formulae in 
BSRs- This syntactic characterization of EBSe(S) 
as BSRs, the latter being a syntactic class for which 
membership is decidable, shows us that the member- 
ship problem for EBSs(E) is recursively enumer- 
able (We show later that the membership problem for 
EBSs(S) is undecidable though in general). Sup- 
pose we knew that <p belongs to EBSs(S), but did 
not know the bound B for </>. A naive approach would 
be to try to prove equivalence of <p with each BSRs 
formula with k 3 quantifiers, for increasing values of 
k. The above proof however shows that for each k, it 
is sufficient to construct exactly one BSRs formula 
with which the equivalence of <p needs to be checked. 
Following is the procedure of finding B in detail: 

For each B > 0, we construct the formula ip as shown 
in the proof. Call this formula ipg. We then construct 
the formula = (cp o Vs)- We then interleave 
the procedures which check for the validity of Sg's for 
B > 0. If indeed belongs to EBS S (E), then one 
of these procedures is guaranteed to terminate. The 
least B for which Eg is valid gives the bound B for <p 
(since, if the bound for <j> was lower, say £>', then from 
the above proof, we know that Eg* would have been 
valid thus violating the minimality of B). It also gives 



an equivalent formula for <p, namely ipg, with the least 
number of 3* quantifiers. This procedure thus requires 
us to construct exactly one BSRs formula having B 3 
quantifiers for each B in order to find an equivalent 
BSRe formula for <j>. It just means that BSRs for- 
mulae other than the ipgs need not be enumerated at 
all. 

6. Uses in SAT and model checking: An advantage of 
converting an EBSs(£) formula <j> to its equivalent 
BSRs formula ip is that <p is satisfiable iff ip is satisfi- 
able. There has been a lot of recent work O on deci- 
sion procedures for the EPR class - which is the same 
as BSR. While the fact that (p G EBS S (£) shows 
that the SAT-problem for EBS S (£) is decidable and 
the bound B for <fi gives a way of checking the satisfia- 
bility of <p, we can leverage recent advances in decision 
procedures for BSR to check for satisfiability of <p. 

Likewise the model checking problem for <p (given a 
S— structure M, is it true that M \= <p) would be the 
same as that for ip. Hence the power of model checkers 
optimized for BSR could be leveraged. 

4 Properties of the EBS S (a) classes 

The EBSs(S) property required that any model M of a 
formula <p € EBSs(S) is such that <p is also True in any 
substructure of M which contains the 'bounded core' of 
M. While EBSs(S) required the preservation of the in- 
terpretation of all the predicates of S, EBSs(ct) relaxes 
this requirement. It insists that the interpretation of only the 
predicates of a specified subset a of S be preserved. The 
E \ er predicates are free to be re-interpreted in any way by 
which (p becomes True in the resulting structure. Specifi- 
cally, condition |2] in Definition Q] in section [2] does not re- 
quire the extension Mi to satisfy ip. Instead, it requires the 
existence of a model M'^ which possibly differs from Mi in 
the interpretation of predicates in S \ a. 
As an example, consider p — Vx3yP(x,y). Here S = 
{P}. If we consider a = 0, then by choosing B = 1, for 
any model M of size > B, take Mi to be the substructure 
generated by any one element of M. Then for any extension 
Mi of Mi within M, construct M' 2 by re-interpreting P 
to be the identity relation. Clearly then M' 2 |= p. Thus 

<^eEBS s (0). 

If however a = E, then consider the model M in which 
Um = N and P(i,j) = True iff j = i + 1. Suppose 
p G EBSs(E). Then there exists a sub-structure Mi of M 
of some bounded size say B such that Mi \= p. Consider 
the highest number i* in Um x ■ Then there exists j* G Um x 
such that P(i*,j*) is True in Ml But since Mi C M, 
j* = i* + 1, This contradicts the assumption that i* is the 



highest number in Um x ■ This shows that ip £ EBSs(£). 

Let us define the family EBSy, = {EBS s (er)|cr C £}. 
In the section below, we look into set inclusions between 
the different classes in £BS^, and show that the poset 
(££><Ss, C) has a lattice structure to it. 

4.1 Lattice Structure of (£BS^,c) 

Theorem 2 1. If u x C a 2 C £, f/zen EBS s (tr 2 ) C 
EBS E (ai). 

2. If Yi contains an arity > 2 predicate, then given 
<J\,<J2 £ £, j/cti \ o"2 w non-empty, then EBSj^a^) \ 
EBSs(cri) ;s aZso non-empty. 

3. If £ contains only unary predicates, then 
EBS s (ffi) = EBS S (cr 2 ) /or any cri,cr 2 C £. 

Proof: 

Statement (HJ above is easy to see. Consider <fi G 
EBSs(c2). Then <f> satisfies condition |2] of Definition [T] 
for cr = o"2. Since ai C c72, iV/2 1 o- 2 = Male-., im- 
plies that -A/jIo-j = iV/2 1 tri - Then (j> satisfies the condi- 
tion 12 for a = o~\ as well. The first condition of Defini- 
tion Q] is independent of a. Then € EBSs(o"i). Then 
EBS S ((T2) C EBS s (<ti). 

We now prove statement (f2]i above. We consider the follow- 
ing cases. 

1) o\ \ <T2 contains an arity > 2 predicate. Let P be such a 
predicate of arity k > 2. 

We use the same idea as in the example above to construct 
a formula (j) 6 EBSs(er 2 ) \ EBSs(cri). Construct cj) as 
follows. 

</> = ( A Vz Q Q(z Q ))A(Vx3yP(x,y,y ) ...,y)) 
Qe£\{P} 

where zq is a vector of variables where the length of the 
vector is equal to the arity of Q. Call the first and second 
conjuncts in the above formula as a and f3 respectively. We 
first show that <f> G EBSs(cr 2 ). Consider a model M of (j> 
of size > 1. Consider any element a G Um and let Mi be 
the substructure of M generated by {a}. Consider any M2 
such that Mi C M 2 C M. Consider M' 2 obtained from M 2 
in which the interpretation of all the £ \ {P} predicates are 
retained as in M 2 (this will mean that the interpretation of 
the predicates of 02 will also be preserved). But for P, since 
P £ (T2, re-interpret P to be 'fully' True, i.e. in M 2 , P is 
True for all values of its arguments. Now since a is a V* 
formula over the vocabulary S \ {P}, it is True in all sub- 
structures of M\-£\{p\. Then since M^^p-j Q ^ls\{p}' 
M^lsx/p} |= a and hence M 2 j= a. Further since P is 
fully True in M' 2 , M' 2 \= (3. Thus M 2 |= 0. This shows 
G EBS S (cr 2 ) with/3 = 1. 



We now show that (j> ^ EBS s (cti). Consider the model iV? 
in which Um — N. Let all the predicates in £ \ {P} be 
fully True in A/. Let P(x, yi, . . . , j/fc-i) = True iff yi = 
y 2 = • • • = yk-i = y and y = x + 1. Consider any 
sub-structure Mi of M of size < B for some £>. Let 
M 2 = Mi and consider any sub-structure M 2 obtained 
from M 2 by possibly re-interpreting the predicates of 
£ \ tri but keeping the interpretations of the u\ predicates 
the same. If M' 2 |= <j>, then M 2 \= (3. Let i* be the highest 
number in Um' = Um 2 - Since M 2 \= (3, there exists 
j* G Um 2 such that Mj |= P(i* , j* , . . . , j*). But since 
P G ax, M 2 \[ P y = M|{ P } and hence 7* = i* + 1. But that 
contradicts the assumption that i* is the highest number in 
Um 2 . This shows that (p $ EBS s (<7i). 

2) cri\a 2 contains only unary predicates. Then P £ cri\cr 2 . 
Let f G (Ti \ o"2. In order to save space, below P(x, y) is a 
shorthand for P(x, y, . . . , y). 
Construct <fr as follows. 
ai = VxVyi ...Vy k -i(P(x,yi,...,y k -i) -> 

((2/1 = J/2) A ... A (j/ fc _2 = 2/fc-i))) 
a 2 = VxVy((s = y)V(P(x,y)©P(y,s))) A 
VxVyVz(P(a;, y) A P(y, z)) ->■ P(x, 2) 

Z 3 = (AQes\{pc/} Vz Q ( 3( z Q)) 

succ(x, y)= (x 7^ y) A P(x, y)A 

Vz((z / iAz^jiA P(x, z)) P(y, z)) 

7 = Vx\/y(succ(x, y) — > (U(x) o ->U(y))) 

4> = ai A 02 A /3 A 7 
Above © means XOR. The condition cti A 02 states that P 
is essentially a linear order. 7 states that the elements of the 
linear order are alternately labelled with U and —U. 
We first show that <j> G EBSs^)- Consider any model 
A I of 4> of size > 1. Let a G Wjvf. Then consider the 
substructure Mi generated by {a}. Consider M2 such that 
Mi C M 2 C M. Consider M^ obtained from M 2 by inter- 
preting all the predicates of £ \ {[/} as in M2 but in which 
U is interpreted such that the elements of the linear order 
defined by P in M 2 are alternately labelled with U and — it/" 
(the linear order amongst the elements of Um^ is the same 
in M' 2 as the linear order amongst them in M). Clearly 
then M' 2 \= 7. Now since ol\ A a 2 A /3 is a V* sentence 
over £ \ {U} and since M2|s\{c/} ^ -^IsUC}' we have 
^2ls\{c/} h (aiAa 2 A/3) and hence M^ (= (aiAa 2 A^). 
Thus M2 h 4>- This shows that 4> £ EBS s (ct 2 ) with 
B = l. 

We now show that </> ^ EBSs(ci). Consider a model M 
of <^> in which = N, all predicates in £ \ {P, U} are 
fully True, P is essentially the usual '<' linear order and 
the elements of Um are alternately labelled with U and -i{7. 
Now consider any sub-structure Mi of M of size < $ for 
some B. Let the number of '-if" elements in be m. 
Then consider any subset U* C Z^m such that (i) C 
and U* \ Umx contains only those elements from Um 



which are labelled with a 'U' in M and (ii) if the number 
of 'U' elements of M in U* is n, then n — m > 2. Let 
M 2 be the substructure of M generated by U* . Then M\ C 
M 2 C M. Now consider any sub-structure M' 2 obtained 
from AI-2 by possibly re-interpreting the predicates of E \ 
<7i but keeping the interpretations of the o\ predicates the 
same. IfM 2 (= (f>, then M 2 |= («iAa 2 A7). Then P would 
impose a linear order on the elements of Um' (This linear 
order would be the same as that imposed on 14m' by the 
interpretation of P in M if P £ a\ and could be different 
from that imposed on Um' by the interpretation of P in M 
if P £ (T\. But in either case, it would be a linear order). 
Now since U 6 u\, the interpretation of U is the same in 
M and M 2 and hence the number of elements labelled by 
U and —U in M 2 are n and m respectively. Since M 2 |= 
7, the elements of Um 1 are alternately labelled by U and 
-i{7 so that \n — m| < 1. But this contradicts the fact that 
n - m > 2. This shows that ^ EBS s (<7i). 
Thus in all cases we have shown that EBSs(<r 2 ) \ 
EBSs(cri) is non-empty. 

The proof of statement of theorem0is easy to see. If £ 
contains only unary predicates, then FOs = Ls- Then 
as seen from the consequences of Theorem Q] in section 
FOs C EBS S (£). Then for any a C £, since 
EBS e (ct) C FO s , we have EBS s (ct) C EBS s (E). 
But from statement Q] of theorem0 we have EBSy;(£) C 
EBS s (er). Thus EBS s (cr) = EBS S (£) for any a C S. 
■ 

Corollary 1 If S contains a predicate of arity > 2, then 
(£BSs, C) /s a complete distributive lattice which is iso- 
morphic to the powerset lattice (p(S), C). T/' E contains 
only unary predicates, then (SBSs, C) collapses to the sin- 
gleton lattice. 

Proof- 
Suppose £ contains an arity > 2 predicate. Consider 
(£BSs, C). Now if a \ ^ c 2 , then from statement|2]of The- 
orem|2j EBSs(cri) / EBSs(ct 2 ). Then we can define the 
function / : EBSy, -)• p(E) given by /(EBS s (cr)) = E\ 
a. If/(EBSsOi)) = /(EBSe(£T 2 )) thenE\ CTl = E\a 2 
or di = cr 2 and hence EBSs(cri) = EBSs(cr 2 ). Thus / 
is injective. For every a £ p(E), /(EBSs(E \ a)) = a. 
Thus / is surjective and hence bijective. 
Suppose EBS s (cri) C EBS s (ct 2 ). Then if a 2 \ e\ + 
{}, then from statement [2] of Theorem [2j EBSs(o"i) \ 
EBSs(o- 2 ) 7^ {} violating the assumption just made. Then 
a 2 C <7i or £ \ u\ C E \ cr 2 or /(EBS E (<ri)) C 
/(EBS e (<7 2 )). 

Suppose /(EBS E (fTi)) C /(EBS s (cr 2 )). Then S \ <7i C 
E \ (72 or <t 2 C (j i . Then from statement Q] of Theorem [2j 
EBSe(ci) C EBS s ((t 2 ). 

Thus EBSs(o-i) C EBS s (cr 2 ) iff /(EBS s (cti)) C 
/(EBSs(<T2)). Thus / is an isomorphism between 



(£BS S , C) and the powerset lattice (p(E), C). ° 
Suppose E contains only unary predicates. Then from 
Theorem [2] (01, we see that EBSy, contains only one 
element, namely EBS S (E). ■ 

The lub{U) and glb(\l) operators in (£BSs,C) are de- 
fined as: EBS s (cti) U EBS S (cr 2 ) = EBS e (cti n a 2 ) 
and EBS s (cri) n EBS S ((T2) = EBS s (cri U <t 2 ). Note 
that EBS s (<7i U cr 2 ) C (EBS E (cri) n EBS s (cr 2 )) and 
(EBS s ((Ti) U EBS s (cr 2 )) C EBS E (cri n a 2 ). 

4.2 EBS s (ct) and other semantic classes 

Let FMPs be the set of all FOs sentences such that if 
<f> has a model, it also has a finite model. Let FSMPs be 
the set of all FOs sentences <f> such that for every model of 
<f>, there is a finite sub-model of it. One can then show the 
following relations of these with EBSs(cr). 

Lemma 1 1. If E contains only unary predicates, then 
FO s = FMP S = FSMP S = EBSs(o-) for all 
a C E. 

2. IfY> contains an arity > 2 predicate, then V a C E, 

(a) EBS E (cr) C FMP S 

(b) (i) EBS S (E) C FSMP S (ii) EBS s (cr) \ 
FSMP S and FSMP S \ EBS S (a) are both 
non-empty for a ^ E. 

Proof: 

Consider Statement0above. If E contains only unary pred- 
icates, then FOs = Ls (the Lowenheim class with equal- 
ity). Then as seen in section0 FO s C EBS S (E). From 
Theorem I2l3l), for all a C E, EBS S (E) = EBS s (cr) C 
FOs- Then every FOs formula has the finite model, finite 
sub-model and the EBSs(c) properties for each a C E. 
Consider the case when E contains a predicate P of arity 
> 2. Every EBSs(cr) sentence is either unsatisfiable or 
has a finite model (of size B where B is the bound for <f>) 
and hence has the finite model property. Thus for all a C E, 
EBS S (a) C FMP S . But the converse is not true. Con- 
sider the sentence </> as below. 
4> — oc\ A a 2 A 

Va;V2/(succ(a;, y) — > (P(x,x) o ->P(y, y))A 
3x3y(first(a:) A P(x, x) A last(y) A ->P(y, y)) 
where a±, a 2 and succ(a;, y) are as in the proof of case (2) 
of statement of Theorem first(a;) and last(x) denote 
that x is respectively the first and last element of the linear 
order. Any finite model of <p can be seen to be 'essentially' 
a linear order with its elements alternately coloured and 
not coloured (an element a is coloured iff P(a, a) is True), 
where the first element is coloured and the last is not. 
Then <j> has finite models of only even cardinality. Thus <fi 



has the finite model property. Its easy to see that also 
has the finite sub-model property. But from Lemma [2] (in 
the forthcoming section |5J, cannot be in EBSj](0) and 
hence from Theorem |2][T]i, it cannot be in EBSj^ct) for 
any a C E. This shows statement[2a]and the second part of 
statementlZBTii). 

Consider statement [2b] Now by definition, all sentences in 
EBSs (E) are also in FSMPj. Then considering <f> above, 
we get statement [ZR i). 

Consider EBSs (a). If £\ a contains a predicate P of arity 
> 2, then consider the sentence </> as given in the proof of 
part (1) of statement |2] of Theorem |2] This sentence cannot 
have the finite submodel property. If E \ a contains only 
unary predicates, then consider one such unary predicate U . 
Then consider the sentence <p = <f>i A <p 2 where <f>i asserts 
that P is essentially a linear order and <f> 2 asserts that either 
there is no last element in the model or if there is one, then 
it must be labelled with U. Then consider an infinite linear 
order in which no element is labelled with U. One can see 
that while this models <j>, no finite sub-model of this can 
model <f>. But since U lies outside a, for any finite sub- 
model, one can change the interpretation of U and label the 
last element of the finite sub-model with U to make <f> true 
in the resulting model. Hence <f> £ EBSs (cr). This finally 
shows the first part of lZbf ii). ■ 

5 The EBS s (0) class 

In this section, we study the EBSs(0) class. We firstly 
observe that this class subsumes some well-known syntactic 
classes. 

5.1 The EBS s (0) class subsumes well- 
known syntactic classes 

We observe that for a = 0, the interpretations of none of the 
predicates of E are required to be preserved. We can then 
easily see that the following lemma is true. Below cardinal- 
ity of a E— structure refers to the cardinality of its universe. 

Lemma 2 A sentence tp £ EBSs (0) iff either ( i) p is unsat 
or ( ii) there exists a least finite cardinal B such that ip has a 
model of (a) every cardinality > B ifip has an infinite model 
and (b) every cardinality ranging from B to the cardinality 
ofp's largest model if p has only finite models. 

Proof: 

Suppose^ £ EBSs(0). Let B be the bound for <f>. Suppose 
it has an infinite model. We show that there is a model of p 
of every cardinality > B. 

Take any finite cardinal n > B. Since ip has an infi- 
nite model, by Compactness Theorem, there cannot be any 
bound on the domain-size of the finite models of p. Then 



consider a model M of ip of domain-size > n. Since p (= 
EBS s (0), there exists Mi C M satisfying the EBS s (0) 
conditions. Then take any M 2 such that M\ C M 2 C M 
and s.t. \Um 2 I = n - Th en there exists M' 2 such that M' 2 has 
the same domain as M 2 and M 2 |= p. In other words, there 
is a model of ip of size n. 

Take any infinite cardinal. Since p has an infinite model, 
using the Upward and Downward Lowenheim-Skolem the- 
orems, we conclude that there is a model of p of every infi- 
nite cardinality. 

Summing up, p has models of every cardinality > B. 

Suppose p has only finite models. Clearly then it cannot 
have models of unbounded size because then by Compact- 
ness Theorem, it would have an infinite model. Then there 
exists a finite cardinal TV such that the domain-size of <^'s 
largest model is N. Then by a similar argument as above, 
we can show that p has models of all domain-sizes ranging 
from B to N. 

Thus the 'only-if ' part of the Lemma holds. 

We now prove the 'if part. If p is unsatisfiable, p £ 
EBSs(0) trivially. Suppose p is satisfiable and has an 
infinite model and there exists a smallest finite cardinal B 
such that p has a model of every cardinality > B. Take 
any model M of tp of domain-size > B. Consider any 
Mi C M such that \U Ml \ = B. Consider any M 2 such 
that Mi C M 2 C M. Now from the premise, there exists 
a model M3 of p of cardinality |Wm 2 |- Then consider the 
E— structure M 2 which is isomorphic to M3 and which has 
universe Um 2 ■ Since the set of models of <p is closed un- 
der isomorphism, M 2 \= p and is the desired model. Thus 
p £ EBS E (0). 

If p is satisfiable, has only finite models and has a model 
of every cardinality ranging from B to the cardinality of p's 
largest model, then by a similar argument as the one above, 
we can show that ip £ EBSs(0). 

Thus the 'if part holds as well proving the lemma. ■ 

Using the above lemma, we can see that many well-known 
classes of FOj sentences fall within EBSs(0). It can be 
shown that the following classes without functions but with 
corresponding 'function' predicates (i.e. we disallow func- 
tions but allow in their place predicates which represent the 
functions by including function axioms to be satisfied by 
the predicates) are also inside EBSs(0). 

1. The Lob-Gurevich class - FOs without equality con- 
taining only unary predicates and only unary functions. 

2. The Gurevich class - the set of all 3* FOs sentences 
possibly containing functions too. 

We prove the inclusion of the above classes in EBSs(0) 
below. 



Lemma 3 The Lob-Gurevich Class C EBSs(0) 
Proof: 

Consider the Lob-Gurevich Class. This is the set of all 
FOs sentences without equality over a vocabulary which 
contains only unary predicates and only unary function 
symbols. 

As shown in [2|(pp. 251), every sentence (j> in the Lob- 
Gurevich class is satisfiable over the same domains as a 
Lowenheim sentence t/j. Then <j> and ijj have the same 
spectra. But we know that if signature of ijj is E, then 
ip G EBS S (E) C EBS s (0). Then using Lemma |2] and 
the fact above that the spectrum of </> is the same as that of 
ip, we have that <p G EBS s (0). 

It is easy to see that a sentence in the Lob-Gurevich class, 
with functions replaced by the corresponding function pred- 
icates satisfying the function axioms will also be in <p 6 
EBS s (0). ■ 

Lemma 4 The Gurevich Class C EBS s (0) 

Proof: 

Consider an FO sentence </> in the Gurevich class. Let 
<f) = 3*ztp(z) where <p could contain function symbols and 
equality too in addition to predicates. Suppose M \= <j> 
such that \Um\ > \<f>\ where \<f>\ denotes the length of (p. 
Then there exists elements a from Um such that M |= <p{&). 
Consider all the terms occuring in <p{&). Let Tbe the set of 
all the values that these terms evaluate to in M. Note that 
\T\ < \4>\. Choose an element a* G Um \ T. Consider the 
model M' such that U M , = U M and M'\ v = M\ v where 
V is the set of all predicate symbols of E. Now for a k— ary 
function symbol / G E, denote the interpretations of / in 
M and M' as Jm and fuj'- Then Jm' is defined as fol- 
lows: Let fit 1 , . . . , t k ) be a term in ip(a). Let t]^ , . . . t k M 
be the evaluations of t 1 , . . . , t k in M (then the former are 
values in T). Then f M > (tj^, . . . ,t k M ) = f M {t M , • • • , *m ) 
(observe that this value must also be in 7~). For all other val- 
ues oi, . . . , Ofc for which there do not exist terms t 1 , . . . , t k 
such that (i) t M = a, for 1 < i < k and (ii) fit 1 , . . . , t k ) is 
a term in </j(a), assign /(oi, . . . , ajt) = a*. 
Then consider the substructure Mi of M' generated by TU 
{a*}. One can see that by our construction above Um ± = 
TU{a*}. Consider the substructure M2 generated by any 
s.t. CMC Wm- Again by our construction Wj\/ 2 = W. 
Then for all terms t appearing in y(a), i^/ 2 = tj\f (since 
M2 C M') and by construction i^p = t^/. Then in M2, 
all the terms evaluate to exactly the same values as they 
evaluate to in M. Now since M^\p = M'\p = M\p (the 
first equality is because M2 C A/' and the second is by 
construction), M2 j= ^(a) i.e. M2 |= </>. 
This thus shows that given a model M of of size > = 
\4>\, it is possible to construct a model M' of <t> by preserving 
the interpretations of all the predicates of E and changing 



the interpretations of only the functions such that M' has 

the extensible bounded submodel property. 

It is easy to see that $ which is obtained by replacing the 

functions in <j) by their corresponding function predicates 

and adding the function axioms will also satisfy the above 

property. 

As a corollary of this we get that if $ has a model with 
domain-size n > B, it has models of all domain-sizes 
ranging from B to n. Then if $ has models of unbounded 
domain-size - which is iff it has an infinite model - then 
by the previous statement and the Upward and Downward 
Lowenheim-Skolem theorems, it has models of all domain- 
sizes > B. Thus $ G EBS s (0) where E is the vocabulary 
of $. ■ 

We have already seen earlier that FOs [1] and FOs [1] with 
counting are inside EBSs(E) and hence inside EBSs(0). 
We now show below that FOs[2] (FOj; with only two 
variables) is contained in EBSs(0). 

Lemma 5 FO s [2] C EBS s (0) 

Proof: 

We refer to the proof of the finite model property of FOs [2] 
as shown in Q . Firstly it is sufficent to consider only arity 
< 2 predicates when dealing with FOs[2]. As shown in 
0, an FOs[2] sentence <f> over E is equisatisifiable over 
the same domains with an FOs[2] sentence %p over a vo- 
cabulary Ei which contains no arity > 2 predicates. The 
paper further constructs a sentence 9 over the same vocabu- 
lary Ei, in Scott Normal Form. i.e. 9 is of the form 

9 = VxVya(x, y) A ^x3y((3i(x, y) A x ^ y) 

where a and the /3j's are quantifier-free. is such that 1/} has 
a model whose domain-size is n > 2 iff 6 has a model with 
domain-size n. Then it is shown that if 9 is satisfiable, it has 
a model with domain-size atmost 3m. 2™ where n = |Ei |. 
We now show that if 9 is satisfiable, either it has only 
finitely many models or it has models with all domain-sizes 
> 3m. 2". Then ip and hence <f> would have either finitely 
many models or models with all domain-sizes > 3m. 2™. 
The argument is a simple extension of the procedure (given 
in 0) used in constructing the small model for 9. 
Firstly if all models of 9 have domain-size < 2™ then all 
models of ijj and hence <f> would also have domain-size < 
2". If not then consider a model of 9 of domain size > 
2". Then there exists an element in the model which is not 
a 'king' (See [5| for the definition of 'king'). Now from 
this model, construct the small model M for 9 as per the 
procedure. Then in M consider an element dij (using the 
same notation as in the paper). We introduce a new element 
d! in M which will 'mimic' dij. In particular, d' has the 
same 1 -type as dij . Next, for every element e in M different 
from d^ and d! , we make the 2-type of (d',e) the same 
as the 2-type of (dij, e). Note that this 2-type assignment 



cannot cause a conflict for the 1-type of e or for the 1-type 
of d! . Further this assignment of the 2-type between d' and 
e cannot conflict with the 2-types of the already existing 
(i.e. prior to the introduction of d 1 ) pairs of elements since 
this 2-type is being assigned for a completely new pair of 
elements. Finally assign the 2-type of (d', dij) to be the 2- 
type of any two elements of M whose 1 -types are the same 
as that of d 1 and dij, for example say, and dij. Thus 
there would be no conflicts at all in this new structure, call 
it M+. 

Now we show that AI + \= 9. While the existing ele- 
ments already have 'skolem witnesses', it remains to choose 
skolem witnesses for d'. To provide skolem witnesses for 
d! , we will again just mimic what was done for dij i.e. for 
each k £ {1, . . . , m}, we will choose the same skolem wit- 
ness for d! for k as the the skolem witness gk(dij) for dij 
for k. Now by construction, the 2 types of (dij , g k (dij ) ) and 
(d', gk(dij)) are the same. Since the 2-type of (dij , gk(dij)) 
ensures that (3 k (dij , gh(dij)) was True, (3 k (d' , g k (dij)) will 
also be True. Then the second conjunct above of 9 would 
be true in AI + . Since the 2-type between d 1 and any el- 
ement e of M is one that was already existing in M and 
since the first conjunct of 9 was true in M, the first conjunct 
would be true in M + as well. Then AI + \= 9. Note that 
\U M+ \ = \U M \ + l. 

We can now use the same procedure on AI + to get another 
model of 9 which contains one more element than the num- 
ber of elements in M + and so on. Thus 9 has models with 
all domain-sizes > 3m. 2 n since the initial model M had 
domain-size < 3m. 2™. Then back-tracking, xp and hence <fi 
has models with all domain-sizes > 3m. 2 n . 
Thus 4> is either unsatisfiable, or has finitely many models 
(all having domain-size < 2") or has models with all 
domain-sizes > 3m. 2". Then by Lemma|2] (j> £ EBSs(0) 
with B < 3m.2". ■ 

It can also be shown easily that the class of all FOs sen- 
tences without equality which have the finite model prop- 
erty is contained inside EBSe(0). 

Lemma 6 FOx; without equality and with finite model 
property C EBS E (0) 

Proof: 

It is well known that if an FOj; without equality sentence 
<j> has a model of size n, then it also has a model of size 
n + 1 . Then if has finite model property, then either <\> is 
unsatisfiable or there exists a least B s.t. <j> has models of all 
cardinalities > B. Then from Lemma|2] <f> £ EBSs(0). H 

Any EBSe(0) sentence (and hence one without equality) 
has the finite model property. This shows that 



EBS s (0) = FO s without equality and 9 
with finite model property 

An example of an FOs without equality subclass with fi- 
nite model property is the Godel-Kalmar-Schiitte class over 
E which is the set of all 3*W3* FO^ sentences without 
equality. This class has the small model property (see J2]). 
Then this class is contained inside EBSs(0). 

5.2 An interesting property of EBS s (0) 
without equality 

Consider a sentence <f> £ EBSs(0) without equality. Given 
a model M of <j> of domain-size > B where B is the bound 
for </>, it is not necessary that M have a bounded core all 
of whose extensions within M also satisfy <f>. But interest- 
ingly, we show in this section that one can always get an- 
other model AI' with the same universe as that of M such 
that M' has a bounded core (of size < B) all of whose ex- 
tensions within AI' are also models of cf>. 
Consider a satisfiable sentence <j> £ EBSs(0) without 
equality. Then there exists a B for <fi such that for all domain 
sizes n > £> we can construct a model M of domain-size n. 
Then there exists a model M of of domain-size B. Then 
it is possible to construct an isomorphic model M* whose 
universe is Um* = {ai, . . . , ag} C Um- Then M* \= <f>. 
We will use this model to construct the desired M' . Let 
/ : Um Um* be any function from Um to Um* such that 
f(a,i) = ai for alH £ {1, . . . , B}. For each k— ary predi- 
cate P £ E, denote the interpretation of P in M' and M* 
as P M and P M respectively. Then define P in M' such 
that M> h P(h, ■ • • , h) iff M* h P(f(bi), . . . , f(h)) 
for b\ , . . . , b k £ Um- Let w.l.o.g., cj) be given by 

4> = Vzo3i> iVzi3t>2Vz2 . . . 3zvVz,.£(z, v\ . . . , v r ) 

where z = (zq, . . . , z r ) and £ is quantifier-free and in CNF. 
We will show that M ' (= <j). 

Consider an instantiation Z of z from Um' = Um- 
We need to choose values d\ , . . . , d r for the variables 
vi,...v r such that M' \= £(Z, di, . . . , d r ). Let Z* 
be the vector of values obtained by subjecting Z to / 
component- wise. Then Z* is a vector of values from 
Um* ■ Now since M* |= <j>, there exist values d*,...,d* 
from U M * such that M* (= £(Z*, d{, . . . , d*). Then 
for each i £ {1, ...,r} choose di = d*. Now 
consider an instance of P in £(Z, di, . . . , d r ). Say it 
is P(ei, . . . , efe). Then by construction above AI' \= 
P(e u ...,e k ) iff M* h P(f(ei), . . . , f(e k )). But since 
Z* is the image of Z under / and f(di) = f(d*) = d*, we 
find that P(f(ei), . . . , f(e k )) is the corresponding instance 
of P(e\ 7 . . . , e k ) in d*, . . . , d*). Then since the latter 

is True in AI*, £,(Z, di, . . . , d r ) is True in AI' . Since Z was 
arbitrary, AI' \= <fi. 



Now let Mi be the substructure of M' generated by 
{ai, . . . , a B }. Let Ah C M 2 C M'. Then since M 2 C M', 
for each fc-ary P G E, M 2 h p ( fo i, • • • , 6fc) •<->• M' (= 
P(6 1; ...,6 fc ) O M* (= P(/(6i),...,/(6fc)). Then by 
a similar argument as the one shown above, we can infer 
that M-2 |= 0. Thus M' has the extensible bounded core 
property where the core has domain-size < B. 

Interestingly, in the above construction, we note that in 
making cf> True in M2, the 'inner' existential variables 
always take values from a fixed set of size B, namely 
{ai, . . . , og}. Then we construct the formula ip as given 
in the proof of Theorem[T](in sectional i.e. 
ijj = 3xi . . . 3.tbVzoVzi . . . Vz r (x) where 

X = (V« ie v-V„ rG v^( z ' w i ^u l7 ...,v r ^u r )) 
Then we can see that on account of the extensible bounded 
core property of M', M' \= ip. As shown above, for any 
model M of domain-size > B, we can construct a model 
M' having the same domain as M and which has the ex- 
tensible bounded core property. Then the spectrum of <p is 
a subset of the spectrum of ip. Clearly it is the case that if 
M \= ip, then M \= (p. Then the spectrum of ip is a subset 
of the spectrum of <p. Then we conclude that <p and ip have 
the same spectrum. Thus we can answer any questions re- 
garding the spectrum of <fi by just asking the same questions 
of the spectrum of ip which is a BSRs sentence. 
While we do not know whether this property extends to the 
whole of EBSs(0) with equality, in some cases it does. 
Consider a sentence <p in the Gurevich class seen above. As 
shown in the proof of Lemma [4] for every model M of <j>, 
as above, one can construct M' by changing only the inter- 
pretations of the 'function' predicates (and by keeping the 
interpretations of the other predicates as in M) such that M' 
has the above mentioned extensible bounded core property. 

5.3 The SAT problem for the EBS s (0) class 

Lemma 7 If ip G EBSs(0), the following problems are 
decidable: 

(i) Is ip satisfiable? 

(ii) Does ip have a finite model? 

Proof: By Lemma [2] if (p G £ BS, it is either unsatisfiable 
or has a finite model of size atmost B, where B is the fi- 
nite cardinal in Lemma |2] By Herbrand's theorem, if tp is 
unsatisfiable, there must exist a finite set of ground clauses 
of p that is propositionally unsatisfiable. We can therefore 
construct a decision procedure by interleaving steps of the 
following: 

- A procedure that recursively enumerates the ground 
clauses in the Herbrand Universe of p and checks 
the propositional unsatisfiability of finite subsets of 
ground clauses, and 



- A procedure that recursively enumerates finite modeM 
of ip and checks whether ip is true in the model. 

Since ip is either unsatisfiable or has a finite model of size 
at most B, one of these is guaranteed to terminate. If we 
terminate by detecting unsatisifability of p, then ip has no 
model. Otherwise, we terminate with a finite model of 
ip. This gives us a decision procedure that serves to check 
satisfiability of ip and also detects if cp has a finite model. ■ 

Now BSR S C EBS S (E) C EBS E (a) for cr C E. Since 
the SAT problem for BSR S is NExpTlME-complete, the 
SAT problem for EBSs(cr) for any a C S (and in particu- 
lar a = 0), is atleast NExpTlME-hard. 
For some special subclasses of EBSs(0), we identify be- 
low the complexity of the SAT problem for these subclasses. 

Lemma 8 Assume a sub-class S o/EBSs(0)/or which B 
for every sentence (f> of the sub-class is atmost /(</>) where 
f : S — > N is an efficiently (polynomial time) computable 
function. Then SATS G NTime(/(0)°(I*D) where SAT-S 
denotes the SAT problem for S and \ <f>\ denotes the length of 
0- 

Proof: 

Given a formula (f> G S C EBSs(0), we construct a Turing 
machine which does the following: 

1 . It first brings <f> to its PCNF p. The time taken to do so 
is O(|0|). The length of p, i.e. \<p\ = 0{\<j>\). 

2. It computes B = f (</>)■ The time taken for this is 
O(9(|0|)) where q is some polynomial. 

3. It then guesses a number n between and B. It then 
constructs the set {1, . . . , n} which would serve as the 
universe Um of a E— structure M. The time required 
to construct the universe is 0(n) = 0(B). 

4. It then guesses the E— structure M. Let r be the 
number of predicates in cf) (r = 0(\c/>\)). Let s be 
the maximum arity of these predicates (s = O(|0|). 
To interpret any predicate P requires specifying the 
truth value of P for each s— tuple of arguments from 
Um- Then the time required to guess an interpreta- 
tion of P is 0(n s ). Doing so for all predicates re- 
quires time 0(r ■ n s ) = 0{\4>\ ■ n'^'). Thus the time 
to guess the E— structure M is 0(\4>\ ■ n^). This 
also is the size of M which we denote by || M \\ i.e. 
\\M\\=0(\ct>\-nM). 

5. It then checks whether M \= cp. It does so by enlisting 
out all the matrices obtained by instantiating the vari- 
ables in the matrix of ip with values from Um and then 
checking whether these instantiated matrices evaluate 
to True in M. Given an instantiated matrix, the time 



required to check whether the matrix is True in M is 

0(|| M || • \(p\) = 0(|| M || • \(/)\). If the length of the 
quantifier prefix of <p is p(= 0(\ip\) = O(|0|)), then 
the number of instantiated matrices is 0(n p ). Then 
the total time to check whether M \= (pis 0(n p ) • 0(|| 
M || ■ |0|) = 0(nM ■ \(f>\-nW ■ |0|) = 0{n 2 -W ■ |0| 2 ). 

If M \= ip, then the TM returns Yes (i.e. tp and hence 
is satisfiable and also would have constructed the model 
M satisfying it). If all computations of M fail, then it 
indeed must be that ip and hence is unsatisfiable due to 
the bounded model property of 0. Thus M decides the 
satisfiability of 0. 

The time taken for any computation = 
Time to compute ip (A) + Time to compute / (B) + Time 
taken to guess n (C) + Time taken to guess M with universe 
of size n (D) + Time taken to check if M \= <p (E) 

Now (C) + (D) + (E) 

= O(n) + O(|0|-n^)+O(n 2 ^l-|0| 2 ) 
= 0(n 2 -W ■ |0| 2 ) 

= 0(n°<W>) 
Then (A) + (B) + (C) + (D) + (E) 

= 0(H) + 0( g (H)) + 0(n°^l)) 

= 0(n°(M>) 

= O(/(0)°<W) 
Thus SAT-S G NTime(/(0)°(^D). ■ 

We get the following immediately as a consequence of the 
above Lemma. 

Corollary 2 If for the sub-class S satisfying the conditions 
ofLemmaM f{4>) < V m) for some polynomial p, then 
SAT-S G NExpTime. If S contains BSR S , then SAT-S is 
NExpTlME-complete. 

We shall look at one such class as stated in the above lemma 
later in section[8]l. 

6 Characterizing the spectra of the EBSs (er) 
classes 

The spectrum of a sentence is defined as the set of car- 
dinalities of all the finite models of 0. The spectrum of 
is thus a subset of N. It was proved by Ramsey [2| that 
the spectrum of any sentence in BSRy; is either finite or 
co-finite. By Theorem Q] (in section [3}, since BSR^ is the 
syntactic characterization of EBSs(E), it follows that the 
spectrum of any EBSs(S) sentence is also finite or co- 
finite. 

Let J-£ be the set of all FOs sentences which have finite or 
co-finite spectra. Then from above, EBSs(S) C Fy,. We 
now ask: how does EBSs(cr) compare with J^? 



Lemma [2] (in section 15. U immediately shows thkt 
EBS s (0) = Js. 

Thus for any S, EBS s (0) is exactly the set of all FO s 
sentences which have finite or co-finite spectra. 
From Theorem [2] (in section 14. IK this implies that unless 
E contains only monadic predicates, for each non-empty 

cr C S, 

EBS s (o-) C Ty, 
If E contains only monadic predicates, we have 

EBS S (E) = Js 

This then answers the question posed above. T-z is exactly 
EBSs (a) if E has only monadic predicates. If E contains 
atleast one predicate of arity > 2, then EBSs (c) is a strict 
semantic subset of J 7 ^ for a non-empty a C E. 
Let for a set A of sentences, S (A) denote the set of spectra 
of the sentences in A. We then ask the question: How do 
t S(EBSs(cr)) for different a compare? 
We have the following lemma. 

Lemma 9 Consider a set S which is finite or co-finite. Then 
there exists a BSRg formula whose spectrum is S. 

Proof: 

Suppose S is finite. Let S = {fci, . . . , k n }. For each fcj, 
construct <f>i as follows: 

j=ki l=ki j=ki 

& = 3xi ■ ■ ■ 3x k y y (( f\ f\ { Xj ^ Xl ))A \/ (y = Xj )) 

j=l l=j+l j=l 

4>i asserts that there are exactly fcj elements in any model of 
4>i. Then the formula 

0s = V 4>i 

i=l 

has a spectrum which is exactly S. Note that since 0s is a 
disjunction of BSR0 sentences, 0s G BSR0. 
Suppose S is co-finite. Then let 

S = {fci, fc 2 , . . . , k n } U {£> + i | i > 0} for some n > 
where B is larger than all the fcjS. 

For each fcj, we construct 0, as shown above. We also con- 
struct the following sentence 0g 

3=B l=B 

<f>B = 3x 1 ...3x B (/\ f\ (xj^xi)) 

3=1 1=3 + 1 

Then the spectrum of 0g is exactly {B + i \ i > 0}. Then 
the formula 

i=n 

0S = (\/ V ^ 

1=1 

has spectrum which is exactly S. Again since 0s is a 
disjunction of BSR0 sentences, 0s G BSR^. H 



Corollary 3 Consider a set S which is finite or co-finite. 
Then for every S, there exists a BSRj; formula whose spec- 
trum is S. 

Proof: 

By Lemma|9] there exists a BSR.0 formula 0s whose spec- 
trum is S. Then consider the formula given by 

i'S = 0S A f\ VzqQ(zq) 

where zq is a vector of variables of length equal to the arity 
of Q. Any finite model of ip$ is also a model of 0s an d 
hence its cardinality must be in S. Conversely, for any k 6 
S, there is a model of 0s whose cardinality is k. Since 0s is 
over the empty vocabulary, this model is just a universe of 
size k. Then this model can be expanded to a model of ips 
by interpreting all the predicates of £ as 'fully' True. 
Thus the spectrum of -0s is exactly S. ■ 

From the above, we see that for any E, iS(BSRv) is 
exactly the set of all finite and co-finite sets. Then 
since from Theorems Q] (section and|2][T]i (section |4~T1 ). 
BSR S C EBS S (£) C EBS s (ct) C we have that 
5(EBSs(ct)) is exactly the set of all finite and co-finite 
sets. Thus, for all £ and all a C £, we have a complete 
characterization of the spectra of EBSs (a) as the set of all 
finite and co-finite sets. 

Further since any EBS0(0) sentence can be easily ex- 
tended to a sentence of EBS£(er) which has the same spec- 
trum as 0, the EBS0(0) class can be seen as the 'minimum' 
class in the EBS heirarchy whose set of all spectra is ex- 
actly the set of all finite and co-finite sets. 

7 Undecidability of the EBSe(o-) classes 

While the satisfiability problem for EBSs(cr) is decidable, 
the membership problem for EBSj^ct) is not always de- 
cidable. Below we look at the cases where EBSs(cr) is 
decidable and where it is undecidable. In the latter case, we 
show a reduction from the halting problem. 
As shown in JJJ, while the set of all those TMs which halt 
on the empty tape is undecidable, researchers set out to find 
out subsets of this set, which are undecidable. For any pair 
(s, I) of natural numbers, define the set -4( s ,2) to be the set 
of all the TMs having s + 1 states (including the halting 
state) and I symbols (including the blank symbol). Then it 
can be shown ( |7|) that if -4( Sj ;) is undecidable, then A( XyV ) 
is undecidable for s < x and I < y. A set R of seven such 
pairs (s, I) have been identified ( Q) such that A[ St i) is un- 
decidable and further these are such that there remain only 
a fixed finite number of pairs (x, y) for which the decidabil- 
ity status of Ai x tV ) is unknown. We use this set R in the 
theorem below. 



Theorem 3 For any a C £, 

l.IfTi contains only unary predicates, EBSs (er) is de- 
cidable. 

2. IfT, contains at least s+1 unary predicates and atleast 
I + 1 predicates of arity > 2, where (s, I) S R, then 
EBSs (c) is undecidable. 

Proof: 

Statement (1) above is easy to see. If £ contains only unary 
predicates, then as seen earlier, EBSe((t) = EBSs(S) = 
FOs. Then checking membership is trivial. 
We now consider statement (2) above. Consider the pair 
(s, I). Then as mentioned above, A( Sy i) is undecidable. We 
show a reduction from A^ s ^ to the set EBSs(cr) which is 
the complement of the set EBSs(c). Clearly EBSe(ct) is 
decidable iff EBSs (c) is decidable. 
Consider Mi G A( s j). Let Mi = (Q, S, A, 8i, q , {h}) 
be a deterministic Turing Machine (DTM) with a two-way 
infinite tape, where Q is the set of states such that \Q\ = 
s + 1, S represents the input alphabet, A represents the tape 
alphabet such that | A| = I, Si : Q x A ->• Q x A x {L, R} 
represents the deterministic transition function, go repre- 
sents the starting state and h represents the unique halting 
state. 

We first modify Mi to a new DTM M = (Q U 

{t} , S, A, 5, q , 0), where t Q and 
5(q,i) = 8 1 (q,i),VqeQ\{h},VieA; 
5{h, i) = (t, i, R), 5(t, i) = (h, i, L) Vi e A 

Thus M mimics the behaviour of Mi exactly except when 
Mi reaches the halting state h. On reaching this state, M 
loops between states h and t forever. Note that M does not 
have a halting state. 

Next, we construct a sentence &m G FOe such that mod- 
els of $w[ represent computations of M on the empty input 
tape that end in state t. For this, we proceed exactly as in 
the proof of Trakhtenbrot's theorem as presented in J6] pp 
165-168] (details are therefore omitted here). We make the 
following slight changes though. 

1 . The proof in |6) uses only binary predicates whereas 
the arity > 2 predicates of S need not necessarily be 
binary. But it is easy to see that binary predicates can 
always be simulated using higher arity predicates (as 
was shown earlier in section [4~TT >. 

2. The proof in (6) introduces a binary predicate 
H q (p, n) for each state q where H q (p, n) denotes that 
at time n, M is in state q and its head is at position 
p on the tape. We instead separate the state and the 
head-position information by using a unary predicate 
U q (n) for each state q G Q and a arity > 2 predicate 
H. H(p, n, . . . , n) is True iff the head is at position p 



at time n. U q (n) denotes that M is in state q at time 
n. If for a given n, all U g (n)'s are False, it would 
be taken to mean that at time n, M is state t. The 
constraints can easily be recast in terms of these pred- 
icates. The total number of unary predicates needed 
above is s + 1 - which is possible to use from £ since 
£ contains atleast s + 1 unary predicates. 

3. The proof in [6] uses the constant min. We get rid 
of this constant and replace all its occurences with a 
variable say x which will be existentially quantified. 
Since M uses a two-way infinite tape, we remove the 
constraint that x is the minimum element, x would just 
be some element which would represent the start time. 

4. The proof in |6| considers the tape alphabet to be 
{0.1}. But the same constraints as for this tape al- 
phabet, can be written for any general tape alphabet, 
in particular A. Then one binary predicate P a (p,n) 
would be used for each a £ A with the constraint 
that for any (p, n) exactly one these predicates is True. 
That requires I binary predicates for all symbols to- 
gether. But we use only I — 1 arity > 2 predicates - 
one predicate P a for each symbol in £ and assert that 
atmost one such predicate is True for each (p, n). The 
case when all the P a 's are False will be taken to mean 
that the blank symbol is present at position p at time n. 
The total number of arity > 2 predicates needed would 
be I - 1 (for the P a predicates) + 1 (for H) + 1 (for the 
linear order) = 1 + 1. These can be used from £ since 
£ contains alteast I + 1 arity > 2 predicates. 

5. The proof in |6| assumes a complete DTM. Here we 
do not require it to be so. Hence we need to capture 
the condition that M might halt on a state q - which is 
not the halting state - just because there is no transition 
out from the state on the symbol a currently under the 
head (Clearly the input is not accepted by this halting). 
Then we add the following constraint <f> in $i for each 
such q and a: 

last(y) = Vx((x ^ y) ->• (x < y)) 

(f>(y) = VnVp((C/ 9 (n) A H(p,n,...,n) A 
P a (p, n, . . . , n)) -> \J qeQ tf g (last(j/))) 

where P a (p, n, . . . , n) is True iff at time n, the symbol 
at position p on the tape is a. <f> then asserts that if 
q and a are as mentioned above, the last state of the 
computation is not t. 

6. The last condition is changed to assert that the last state 
of the computation is t 

$ 2 = 3x(bst(x) A A qeQ -U q (x)). 

7. For all those P £ £ which were not used in the 
constraints above, we just add the constraint ipp = 



VzpP(zp) where zp is a vector of length equal 15 
the arity of P. These additional constraints are just 
to make &m have signature equal to £. 

The above constructed $wi can be seen to be in FOs- We 
now observe that. 

A) A £— structure M with \14m\ = a for some cardinal 
a is a model of $m iff M represents a computation 
of length a of the DTM M. (on the empty input tape) 
which ends in state t. 

We now show that M.\ halts on the empty input tape iff 

$M £ EBS S (cr). 

If part: Suppose hA\ does not halt at the halting state 
h. Then M. either halts at a non-halting state or it has 
an infinite computation that does not through t. In either 
case, no computation of it ends in t. Since by ([Aj above, 
there is a 1-1 correspondance between computations of M. 
that end in state t and the models of <^vt, we find that 
4>M is unsatisfiable. Then (pM £ EBSs(ct) trivially. So 
(j)M i EBS s (a). 

Only if part: Suppose that M.\ halts at the halting state h. 
Let TV be the length of the 'halting' computation of Mi. 
Then M reaches h for the first time after Af steps. We have 
the following two observations: 

1 . Consider the computation of M. of length Af+2k(k > 
0) (since A4 is a DTM, there is only one computation 
of length M + 2k for each k). By the construction of 
A4, every such computation ends in state h (and hence 
not at t). Then from observation (0 above, &m has 
no model of size Af + 2k for all k > 0. 

2. Consider the computation of AA of length Af + 2k + 
1 (k > 0). By construction, the computation ends in 
state t. Then by (TAJ above, there exists a model of $m 
of size Af + 2k + 1, for every k > 0. 

Suppose that <& M £ EBS s (0). From observation ©, 
we know that $m has infinitely many models. Then by 
Lemma |2] (in section 15.11 ), there exists a finite cardinal B 
such that $m has a model of every size larger than B. How- 
ever, from observation ([]]), we know that by taking any k 
such that Af + 2k > B, $m has no model of size Af + 2k. 
Therefore, $ M EBS s (0). T hen since E BS s (g) C 

EBS E (0) we conclude tha t <$> M £ EB S S Q). 

Thus Mi halts iff $ M £ EBS s (cr). Thus EBS S (a) is 
undecidable. Hence EBSs(cr) is undecidable. ■ 

The above proof ofcourse leaves out the £s which contain 
s + 1 unary predicates and / + 1 predicates of arity > 2 
where the decidability status of A( s j) is unknown. We do 
not have an answer yet for the decidability of EBSs (c) for 
these £s but we conjecture that these must be undecidable 
as well. 



While for the Ss considered in Theorem[3]|2]i, the latter says 
that EBSs (c) is undecidable, it does not tell us whether 
these are r.e. or co-r.e. Indeed we do not have an answer 
yet to this question as well for all a. For the case of a = £, 
the EBSs(S) class has a syntactic characterization in the 
form of BSRs- Then as seen in section [3] EBSs(S) is 
r.e. and not co-r.e. If likewise, for the other cr's too, we 
can find a syntactic characterization for them or in general a 
characterization in terms of any recursive class of formulae, 
then we know that they also would be r.e. and not co-r.e. 

8 A Syntactic sub-class of EBS S (a) 

BSRs gave a good starting point as a syntactic characteri- 
zation of EBSs(S). In this section, we attempt to provide 
a syntactic characterization of a fragment of the EBSs(c) 
class. Without loss of generality, let if be an FOj sentence 
in prenex conjunctive normal form (PCNF). As usual, we 
consider X as a relational vocabulary. Let V{ip), EV(<p) 
and AV {if) denote respectively the set of the leftmost ex- 
istential, non-leftmost (or 'inner') existential and universal 
variables of if. We introduce the following classification of 
predicates and their arguments in if. 

1. The I th argument (call it x) of an instance of predicate 
P in f is called {a) free if x £ V{if) (b) universal if 
x £ AV{(f), and (c) existential if x £ EV{if). 

2. The free support set of an instance / of P in ip is the 
set of all variables in V{ip) that appear as arguments of 
/. Likewise, the existential and universal support sets 
of an instance I of P in if are the sets of variables in 
EV{ip) and AV{ip) respectively that appear as argu- 
ments of /. 

3. An instance I of predicate P in ip is called {a) free if its 
existential and universal support sets are both empty, 
(b) universal if its existential support set is empty and 
universal support set is non-empty, and (c) existen- 
tial otherwise, i.e., if its existential support set is non- 
empty. Note that an existential instance of P may have 
a universal argument. 

4. Predicate P in if is called (a) free if every instance of 
P in ip is free, (b) universal if every instance of P in 
ip is either universal or free and atleast one instance is 
universal, (c) existential if atleast one instance of P in 
ip is existential. Note that an existential predicate may 
have a universal or free instance. 

5. Two instances of predicate P in if are said to be ex- 
istentially distinguishable with respect to variable v if 
there is an integer i such that (i) the i th argument of 
each instance is either free or existential (i.e. not uni- 
versal) and (ii) v appears as the i fh argument of one 



instance but not as the i th argument of the other in4 
stance (thus v £ EV{ip) U V{if)). 

6. An instance / of a predicate P is said to have +ve 
polarity in <p (or / is +ve in if) if it appears un-negated 
in ip. It is said to have — ve polarity in ip (or / is —ve 
in ip) if it appears negated in if. 

As an example, consider the sentence 
ip = 3y3u\lv3w {P{y, y) V ^Q{u, y) V R{y, v))A 
{Q{v,u)V P{y,u) A^R{w,v))) 
Here V{ip) = {y,u}, AV(ip) = {v} and EV(ip) = {w}. 
For P, the free, universal and existential support sets of the 
first instance are {y}, and respectively, while those of 
the second instance are {y, u}, and respectively. Both 
instances are free and hence predicate P is free. The first 
instance of Q is free while the second instance is universal 
as its universal support set is {v} ^ and its existential sup- 
port set is 0. Hence Q is universal. The first instance of R 
is universal while its second instance is existential since its 
existential support set is {w} ^ 0. Hence R is existential. 
Also the two instances of R are existentially distinguish- 
able w.r.t. w since (i) the first argument of each instance 
is not universal and (ii) w appears as the first argument of 
the second instance but not as the first argument of the first 
instance. Finally, the first instance of R is +ve i.e. has +ve 
polarity while the second instance of R is —ve i.e. has — ve 
polarity in if. 

Let U denote the set of all unary predicates of S. Let J 7 , A 
denote respectively the set of all free and universal predi- 
cates of X. Let E\j denote the set of all variables in EV {if) 
which appear in if as the argument of some unary predicate. 
LetEJ = EV(<p)\E u . 

Definition 2 (The EDP s (er) class) Let if be a FO s sen- 
tence in PCNF. Then if is said to have Existentially Dis- 
tinguishable Predicates preserving a C E if the following 
hold: 

1. dCUUJUi 

2. Equality (if present) £ J- U A. 

3. For any existential predicate P of arity > 2, every 
pair of instances of P appearing in if in different 
clauses and with different polarities, must be existen- 
tially distinguishable with respect to atleast one exis- 
tential variable outside E\j. 

The set of all FOs sentences having existentially distin- 
guishable predicates preserving a is called the EDPs(ct) 
class. 

Note that a unary predicate or a predicate with arity 
> 2 that is free or universal in if can be either in a 



or in £ \ a. As an example, consider the sentence 

p = 3x3y\fz3v((P(x, z) VR(y,z))A 

(-.P(«, y) V P(z, j/)) A (-,iE(x, z) V (z = i))) 
Here, S = {P, P}, U = J" = 0, .4 = {R, =} and Py = 0. 
Consider u C S such that P £ <r. Then we can see that con- 
ditions Q] and [2] in the EDP definition are satisfied. Pred- 
icate P is existential as its second instance P(v,y) is ex- 
istential. For the first and second instances of P from the 
left, the second instance is existential and lies in a different 
clause and with different polarity w.r.t. the first instance. 
Indeed then v ^ E\j existentially distinguishes the two in- 
stances. The second and third instances of P have different 
polarities but lie in the same clause. The first and third in- 
stances of P lie in different clauses but have the same po- 
larity. Then these pairs trivially satisfy condition [5] of the 
EDP definition. Hence ip G EDP S (cr). 
If P G a, then ip ^ EDPs (cr) for any such a. This is be- 
cause P is existential and conditionQ]in Definition|2]allows 
only free or universal predicates with arity > 2 to be in a. 
As a second example, consider 

ip = 3x\fz3v(P(v, z) V Q(z)) A {P(x, v) V ^Q{v)) 
Here, E = {P, Q}, T = A = {}, U = {Q}. Both P and 
Q have two instances in different clauses and for each of P 
and Q, one of its instances is existential. But for P, both its 
instances are of the same polarity. For Q, we find that its in- 
stances even have opposite polarities, but Q is unary. Then 
both P and Q satisfy condition [3] of Definition [2] trivially. 
Hence ip(x) G EDP S ({Q}) and ip(x) £ EDP S (E). 

Lemma 10 Let ip be a FOs sentence in PCNF in which 

1. For every existential predicate P of arity > 2 in E, 
either (a) all instances ofP in ip have the same polarity 
or (b) all instances of P appear in a single clause. 

2. The equality predicate, if present, has free or universal 
arguments in all its instances. 

Then there exists a C E such that ip G EDPs(<r). 

Proof: Let a C E be the (possibly empty) set of unary 
predicates alongwith the predicates of arity > 2 that are 
either free or universal in tp. Then it easily follows from 
Definition|2]that p G EDP s (tr). 

8.1 The EDP s (er) class as a syntactic frag- 
ment of the EBS E (er) class 

Theorem 4 Let p be a FOj sentence in EDPs(cr). Let k 
be the number of unary predicates in E. Then p satisfies all 
conditions in Definition\l\( of section^ with B — \V{ip) \ + 
+ 2 k . 

Before proving this result, we see that this theorem imme- 
diately implies the following. 



Corollary 4 V<r C E, EDP s (cr) C EBS s (ct). 13 

Thus EDP S (cr) is a syntactic fragment of EBS S (cr). We 
shall explore the quesrion of whether EDPs(cr) is a syn- 
tactic characterization of EBSs (cr) in the forthcoming sec- 
tions. We now present the proof of Theorem|4] The proof 
is a bit long so while the interested reader is urged to go 
through it, the proof if skipped would not affect the flow. 

8.1.1 Proving Theorem|4] 

We prove a stronger version of Theorem [4] namely for for- 
mulae with free variables. The results naturally follows for 
sentences too. 

For the case of free variables, the EBS definition is slightly 
widened to also assert that if M \= ip(a) where a is a vector 
of elements from M, then Mi must contain a. The other 
conditions remain exactly the same. 

Our proof is motivated by the proof of finite model size 
of formulae in the Lowenheim class and the Bernays- 
Schonfinkel-Ramsey class, as given in J2J- 

|X| 

Consider a E— structure M with universe % and a G U M 
such that M \= p(a) and \U M \ >m + \ V(ip(x)) \ + \E^\ + 
2 k . 

Now we have that \C\ = m and |U| — k. Let A' C U M 
be the set of interpretations of the constants of C in the 
model AI . Let A" C U M be the set of values assigned 
to variables in V(ip(x)) in showing that M |= (/?(a) (The 
existential variables in EV(ip(x)) being the leftmost, the 
values assigned to them in M are independent of the values 
of all the universal variables). Thus, A" contains all values 
in a and also values assigned to variables bound to the 
leftmost existential quantifiers in p(x). Clearly, \A'\ < m 
and \A"\ < \V(ip(x))\. Since as per our terminology, all 
the arguments belonging to V(ip(x)) U C are called free 
arguments, we denote by Free the set V(p(x)) U C and by 
Val(Free) the set of values in M, for the elements of Free 
i.e. Va\(Free) = A' U A". 

Without loss of generality, let U = {Qi, . . . , Qk}- For ev- 
ery element e in the universe Um, we associate a binary 
vector or colour C(e) G {0, l} k , where the i th component 
of C(e) is 1 iff M \= Q l (e). For every c G {0, l} fc , let W M 
denote the subset of elements of Um that have the colour c. 
Consider the set V^j = U\ { \ Yal(Free). We now choose a 
subset A c of V L M as follows: if V C M = 0, then A c = V C M = 
0; otherwise, A c is a singleton set formed by selecting any 
element a c from V^j (i.e. A c = {a c }). 
Let E\j = EV(ip(x)) \ E\j denote the complement of E\j 
within EV(ip(x)). E\j denotes the set of all variables of 
EV((p(x)) that do not appear in <^(x) as an argument of any 
instance of any unary predicate. Then we finally choose a 
subset of Um of size \E\j \ which we denote as Val(Pu ) such 



that (i) Val(-Eu) D Val(Free) = and (ii) Val(-Eu) fl A ° = 
for all colours c 6 {0, l} fc . 
Note that 

\\ai(Free)\ + |Val(Sb)| + ^{o.ipl^l 

< |A'| + |^"| + l^l+S ce{ o,i} fc l 

< m+ \V(<p(x))\ + \E^\ +2 k 

so that we can indeed choose the subset Val(-Eti) of 
Um of the mentioned size. We denote the elements 
of Val(.Eu) as o-i where i is such that Vi £ E\j (thus 
Val(^u) = {a,i\vi S Ey}). Note that the sets Val (Free), 
Val(-Bu) and are a H disjoint with each other for each 
c 6 {0, l} fc . Further A Cl and A C2 are also disjoint with 
each other for all cj., C2 £ {0, l} fe where ci 7^ C2. 

We now consider the sub-structure Mi of M generated by 

Val(Free) U Val(i^) U LU{o,i} fc ^ We show that this 
sub-structure Mi satisfies all of the EBS conditions with 

B = m+\V(<p(x))\ + \EZ\ + 2 k . 

Since ip(x) is in prenex normal form, we assume without 
loss of generality that 

<p(x) = 3vfe/* mosf Vzo3viVzi3« 2 Vz2 • • -3« r Vz r 

-0(x,V;^ m „. s ,,Z o ,Wi,Zi, . . . V r ,Z r ) 

where ?/> is a quantifier-free matrix in CNF, \ieftmost 
denotes the (possibly empty) set of variables bound to 
the leftmost quantifiers (all of these variables are thus 
in V(ip(x))), r denotes |£V((^(x))| and Zj denotes 
the (possibly empty) vector of universally quantified 
variables that appear immediately to the right of the 
existentially quantified variable Vi in the quantifier 
prefix of <p(x). Let z = (z , Zi, . . . , z r ) denote the 
tuple of all the AV(ip(x)) variables and v = (i>i,i>2j 
...,v r ) denote the tuple of all the EV(tp(x)) variables. 
For every extension A/2 of Mi within M, we now describe 
how to construct a E— structure M' 2 such that Um 2 = Um' 
M' 2 h 95(a) andM^| CT = M 2 \ a . 

If M2 |= 93(a), we simply choose M2 = A/2- Clearly, this 
choice satisfies the EBS conditions. If Af2 Y= 95(a), we 
must redefine the interpretations of (some) predicates in 
E \ a such that the resulting structure M 2 is a model of 
93(a). We note that this A I 2 has the same universe namely 
Umi as M i.e. Um 1 = Um 2 - Therefore henceforth we will 
refer to the universe of M 2 as Um 2 . 

The way we proceed is we first create a quasi E— structure 
Af 3 which has the universe Um 2 and such that ip(&) is True 
in it. It is quasi in the sense that it gives atleast one truth 
value to each predicate of E for each valuation of its ar- 
guments. In other words, it could give both truth values 
to a predicate for certain valuations of its arguments. The 



desired M 2 would then be extracted out from this qua^? 
E— structure M3. 

In the following, we overload the |= symbol so that we de- 
note 93(a) being True in M 3 as M 3 |= 93(a). 
Now, in order to get A/ 3 , we observe that for every assign- 
ment of values Z from Um 2 to the universally quantified 
variables z in 95(a), we must choose a value from Um 2 f° r 
each of the constants in C and each of the existentially quan- 
tified variables, namely the variables in v leftmost and those 
in v, such that ip(x, \ieftmost, zo, ui, zi, . . . v r , z r ) instantiated 
with these values evaluates to True in M3. Suppose we are 
indeed able to choose these values from Um 2 ■ Upon sub- 
stitution of these values in tp, call the resulting fully instan- 
tiated matrix as ipM 3 [Z] (Note the square brackets in the 
notation which are used to mean that Z is considered as an 
'input' to give as 'output', a fully instantiated matrix de- 
noted as ipM 3 [Z] . It should not be looked at as meaning that 
tpM 3 is a formula whose free variables are being instantiated 
with Z - in that case we would use round brackets around 
Z). 

Before proceeding ahead, we observe that there are two 
tasks to be done. The first is, given a valuation Z of the uni- 
versal variables, choosing the values for the constants and 
all the existential variables to substitute in ip to get ipM 3 [Z]. 
The second is to define the (quasi) structure M3 over which 
ipM 3 [Z] evaluates to True for each valuation Z from Um 2 of 
the z variables so that as a result M3 \= 95(a). 
For the first task, we choose the values as follows: 

1 . For each constant in C, we interpret it in M3 with the 
same value with which it is interpreted in M. Like- 
wise for each variable of V(<p((x)), we substitute for 
it the same value which is assigned to it in M (This 
is possible since Val(Free) C Um 2 )- These values of 
course are independent of the instantiations Z for the z 
variables. This takes care of all elements of Free. 

2. For each variable vi 6 E\j, we assign it the value ai € 
Val(-Eti) Q Um 2 - These values too are independent of 
the instantiations of the z variables. 

3. Given a valuation Z of the z variables, for each variable 
Vi e E\j, we do the following. We turn to the model M 
and look at the assignment made to the v variables in tp 
for this valuation, namely Z, of the z variables. Since 
M |= 93(a), we know that there exists a choice of val- 
ues from Um f° r each existentially quantified variable 
and the constants such that when these values are sub- 
stituted in ip(x, ^leftmost, z , ui,zi, . . . v r , z r ), we get a 
fully instantiated matrix - which we denote as ipM [Z] - 
which evaluates to True in M. Let d be the value sub- 
stituted for Vi from Um in making ipM [Z] True in M. 
Let c be the colour of d in M. 

(a) If d belongs to Yal(Free), then we choose the 



same value d to substitute for Vi from Um 2 (This 
is possible because Val(Free) C Um 2 )- 

(b) If d is not in Val(Free), then we choose the value 
a c G A c C W M2 to substitute for Wj. 

Using the above procedure (call it Selector), for each valua- 
tion Z of the z variables, we determine the values to assign 
to each of the existential variables and constants and sub- 
stituting all these values in ip, we get the fully instantitated 
matrix tpM 3 [Z] . 

We now take up the second task namely defining M3 such 
that A/ 3 (= <p(a). 

Before proceeding ahead, we introduce a little terminology 
to make further explanations easier. If I denotes the in- 
stance of a predicate P in ip, we denote by Im [Z], the in- 
stance / as it appears in Vm[Z] (Thus Jm[Z] would look 
like P(d) where the values in d come from Um)- Likewise 
we denote by Im 3 [Z], the instance / as it appears in ipM 3 [Z]. 
Then for each valuation Z of the z variables, for each predi- 
cate P G EU{=} and for each instance I of P in ip, we do 
the following: 

1. If P is miliary (i.e. constant), then we have already 
stated above how P must be interpreted in A/3. 

2. If P G U, then Im 3 [Z] is assigned the same truth 
value in A/3 as Im[Z] has in M. In other words 
M 3 h-WZ] iffiW>I M [Z]. 

3. If P is atleast 2-ary, we have the following: 

(a) If P is a free or universal predicate, then Im 3 [Z] 
is assigned a truth value such that M3 |= 1m 3 [Z] 

mM\=i M [z}. 

(b) If P is an existential predicate, then Im 3 [Z] is 
assigned a truth value such that 

- M3 |= Im 3 [Z] if / is +ve in -0 and 

- M3 |= -i/m 3 [Z] if I is —we in ip. 

By the above, for each valuation Z of z, since either we have 
given an instance in ipM 3 [Z] the same truth value in M3 as 
the corresponding instance in ipM [Z] has in M or we have 
made the literal corresponding to the instance True in M3, 
we can see that ipM 3 [Z] is true in M3 since ipM [Z] is true in 
M. 

We note now that by the above procedure, we would have 
interpreted in A/3 (i.e. given truth values in M3 to) all the 
predicates in E for those values of their arguments which 
were seen in the 'ipM 3 [Z]'s that were obtained when enlist- 
ing all the valuations Z of the universally quantified vari- 
ables. Lets call this whole procedure as procedure Pi. 
In general, V\ might not exhaust all possible argument 
values for all the predicates and hence the interpretation of 



the predicates in M3 would be partial and incomplete. in" 
order to give the complete interpretation in M3 for each 
predicate in E, we need to consider for each predicate, 
those values for its arguments that were not covered by V\. 
As for the interpretations of the predicates for these values 
(i.e. which were not covered by Pi), it doesnt matter in 
which way they are interpreted because these values do 
not in any way contribute towards making ipM 3 [Z] True 
in M3 for any valuation Z from Um 2 of the z variables 
(and hence in showing M3 |= 93(a)). Hence, in particular, 
they could be interpreted as they are in M. Lets call this 
procedure of assignment of truth values to the predicates 
of E for their remaining argument values as procedure 
Vi. Clearly procedures Pi and P2 completely define in 
M3, the interpretations of all predicates for all values of 
their arguments. Further they define interpretations of the 
predicates for disjoint sets of values of their arguments. 

Having defined A/3, we now see that it is possible that above 
procedures V\ and P 2 together give interpretations to the 
predicates of E in A/ 3 that cause a conflict i.e. a predicate 
being assigned both True and False values in A/3 for the 
same values of its arguments. Conflicts thus make A/3 a 
quasi E— structure (and not a E— structure). In what follows 
we show that either conflicts are prevented by the EDP 
conditions or conflicts that are not prevented can be cured 
(resolved) without affecting the truth of ip(a) in the 'cured' 
A/3. In other words, we will be able to construct the desired 
model A/2 by simply curing all the conflicts in A/3 (i.e. by 
extracting the appropriate truth value in case of a conflict). 
Then A/ 2 would be a valid E— structure giving unique truth 
values to each predicate for each valuation of its arguments. 
Further A/ 2 would be a model for ip(a) i.e. A/ 2 (= tp(a). 
Before going ahead, we note that A/ is clearly free of any 
conflicts. 

Handling conflicts 

Suppose there was a conflict i.e. a predicate P got 
assigned both True and False values in A/3 for the same 
vector of values (say d) as its argument. Then we have the 
following cases: 

1) Suppose the two different truth values to P(d) are both 
assigned by P 2 . But P 2 assigns the same truth values as 
in A/. This shows that there must be a conflict in A/ itself 
which we know is not the case. 

2) Without loss of generality, suppose P(d) is assigned True 
by Pi and False by P 2 . Then as seen above, since Pi and 
P 2 give truth values for disjoint sets of values of arguments, 
P(d) would be assigned a truth value either only by Pi or 
only by P 2 contradicting the assumption above. 

3) P(d) is assigned both the truth values by Pi. We abbre- 
viate the truth value True as t and False as /. Having seen 



how the procedure V\ works, we conclude that for each 
truth value a 6 {t, /}, P(d) must then have appeared in 
ipM 3 [Z q ] for some valuation Z Q of the z variables where it 
was assigned that truth value (namely a). Let for truth value 
a, the instance I a of P in ip be instantiated in ipM 3 [Z Q ] to 
get P(d). In particular, the instance P of P in -0 gets in- 
stantiated in 7/^/3 [Z t ] to get P(d) and the instance I' of P 
in ip gets instantiated in tpM 3 [Z/] to get P(d). 
Using our notation introduced earlier, the instances men- 
tioned above would be denoted as I M [Zt] and l{ 43 [Z /] re- 
spectively (P Ms [Z t ] = l[ h [Z f ) = P(d)). Further the 
former instance is assigned truth value as True and the lat- 
ter is assigned False in M3. 

Before proceeding ahead, we make the following observa- 
tion. 

Lemma 11 Consider an instance I in ip of a predicate P. 
Let Z be an instantiation from Um 2 > of all the universal vari- 
ables z. Then the following are true: 

1. For each i ranging from 1 to the arity of P, if either 

( i) the i th argument of I in ip is universal or ( ii) the 
i th argument of Im 3 [Z] is from Val(Free), then the i th 
argument of Im [Z] is the same as the i th argument of 
Im s [Z]. 

2. If I is a free or a universal instance in ip, then Im [Z] 
and Im 3 [Z] have the same vector of values appearing 
as their arguments. 

Proof: 

1 . (i) If the i th argument is universal, then since ipM 3 [Z] 
and ipM [Z] have the same valuation of all the universal 
variables, namely Z, then in particular for the i th argu- 
ment of I, the same value is substituted for it in both 
■0m 3 [Z] and^Af[Z]. 

(ii) If the i th argument of Pa/ 3 [Z] is from Val(Pree), 
then it means that the i th argument of I is either (a) 
free or (b) universal or (c) a variable in Ey. For (a) and 
(c), we see directly from cases (1) and (3a) of Selector 
that the i th argument of Pv/[Z] is the same as the i th 
argument of Im 3 [Z] . For (b), the reasoning is already 
presented above. 

2. If I is a free or a universal instance, each argument 
of it is either free or universal. Then by applying the 
reasoning presented in the preceding point to all argu- 
ments i ranging from 1 to the arity of P, we can see 
that Im [Z] and Im 3 [Z] will have the same vector of 
values appearing as their arguments. 

■ 

Coming back to checking for conflicts, we have the follow- 
ing possibilities: 



1. P is unary. Then d = d (say). 

(a) If P and I* are free or universal instances, then 
from Lemma [TTJ2), for each truth value a € {t, /}, 
JJ[Z a ] and [Z a ] have the same value as their ar- 
gument (namely d). Then P M [Z t ] = I u \Lf \ — P(d). 

(b) If d G Val(Pree), then from Lemma fTTll). we 
again see similarly that 7|^[Zt] = l[j[Zf] = P(d). 

In either of the above cases, from case (2) of Pi, 
I M [Z a ] and I M;j [Z a ] have the same truth value 
(namely a) in M and M 3 respectively. But then this 
shows that P(d) is assigned both truth values in M 
thus showing a conflict in M itself which we know 
does not exist. 

Without loss of generality, suppose P is an existential 
instance (i.e. of the form P(v) where v £ EV(<p(x))). 
Note that the argument v cannot belong to E\j. The 
case when v is assigned the value d G Val(Free) is al- 
ready considered above. Then from case 3(b) of Selec- 
tor, the only remaining case is when d = a c for some 
colour c. Since a c appears as the argument of P M [Zt], 
from case (3b) of Selector, it means that the colour of 
o c in M is c. If P M [Z t ] = P(e?i), then the colour of d\ 
is also c. Further since by case(2) of V\, M |= P M [Z t ] 
iff M 3 |= P Ms [Z t ], we have that P{d l ) is True in M. 
Then since both d\ and a c have the same colour in M, 
we have that P(a c ) is also True in M. 

Since the argument of P M [Z /] is also a c , it means that 
the argument of I* is either (i) universal or (ii) existen- 
tial (in particular, belonging to E\j. In case of (i), by 
Lemma \TT\2), I f M [Z f ] = l{ h [Z } ] = P(a c ). By case 

(2) of Pi, M \= I f M [Z f ] iff Af 3 (= ll h [Zf], so that 
P(a c ) is False in M, But this is a contradiction. 

In case of (ii), suppose P M \Zf\ = P{d,2)- Since 
I M3 [Zf] = P(a c ), by case (3b) of Selector, d 2 has 
the colour c. Then P{d-z) is True in M. But by case 

(2) of Pi, M h I f M l z A iff M 3 h lli 3 l z f] 80 that 
P(e?2) is False in M. Now since d^ and a c have the 
same colour in M, we must have that P(a c ) is False in 
M. This is again a contradiction. 

Thus there are no conflicts in M 3 as far as the unary 
predicates go. 

2. P is of arity > 2 and is a free or universal predicate. 

Then each of P and l' is either universal or free in 
(p(x). Then from Lemma [TTT 2), for each truth value 
a G {t, /}, I M [Z a ] and I M [Z Q ] have the same vector 
of values as their arguments (namely d). Further by 
case (3a) of Pi, both have the same truth value (namely 
a) in M and M3 respectively. But then this shows that 
P M [Z t ] = I f M [Z f } = P(d) and that P(d) is assigned 



both truth values in M thus showing a conflict in M 
itself which we know does not exist. 

Thus there are no conflicts in M3 for the free and uni- 
versal predicates too. 

3. P is of arity > 2 and is an existential predicate. 

If P and I* are of the same polarity in <p(x), then from 
case (3b) of V\, we see that in M3, both P M [Z t ] and 
P M [Zf] have the same truth value - True if their po- 
larity is +ve and False if their polarity is — ve. Then 
there is no conflict in the first place. 

If P and V are of opposite polarity, then suppose that 
they were in different clauses. From the last condition 
of the EDP definition, there is a variable vi G Ey 
such that P and I* would be existentially distinguish- 
able by it. Suppose it appears as the n th argument of 
V . Then the n th argument of P would be either an 
variable v G Free or a variable v p G E\j or a variable 
v r G E\j where r 7^ I. Then Selector would assign 
the n th argument of 1^ [Zf] as a; G Val(-E'u) while 
the n th argument of P M [Z t ] would be respectively as- 
signed a value either from (i) Val(Free) or from (ii) 
A c 7^ for some colour c or (iii) a r G Val(E'u). The 
values in case of (i) and (ii) must be different from a/ 
since Val(-Eti) is disjoint with both Val(Free) and A c . 
In case of (iii), since r / I, a r ^ a;. Thus in all cases, 
the n th argument of P M [Zf] would be different from 
that of P M [Zt]. Then the conflict couldn't have hap- 
pened at all. A similar argument can be given for the 
case when vi appears as the n th argument of P. 

(We thus note how the last condition in the EDP def- 
inition prevent the occurence of a conflict.) 

Finally consider the case that P and I* are of oppo- 
site polarity and are in the same clause say C of ip. 
Then since M 3 (= P Ms [Z t ] and M 3 \= -J& 3 [Z/], by 
case (3b) of Vi, we have that P is +ve while I* is 
—ve in <p(x). Then for the valuation Z/ of the z vari- 
ables, V\ would assign P Ms [Z f], the value True in M 3 . 
Let C[Zf] be the clause C as it appears in ?/>m 3 [Z/]. 
Then C[Zf] which contains P M3 [Zf] and Ij^ [Zf], is 
not dependent on the literal corresponding to P M [Z f] 
for C[Zf] to become True in M 3 as P M [Zf] is already 
True in C[Zf]. Then we cure the conflict on the value 
of P(d) (= P Ms [Z t ] = l{ h [Z /]) by fixing the value of 
P(d) in Ms to be True. 

Now since M3 |= 93(a), we have that for every clause 
Ci of ■0, C\ [Z] is true in M3 for each valuation Z of 
the z variables (Ci[Z] is the clause C\ as it appears 
in i/jm 3 [Z]). We note that while the fixing mentioned 
above doesnt affect the truth of clause C[Zf], we now 
investigate whether this makes some other clause False 



i.e. does there exist a valuation Z* of z and a clause 
of i/j such that in ipM 3 [Z*], the clause C* [Z*] (which is 
the clause C* as it appears in [Z*]) became False 
due to the fixing. Suppose there is such a Z*. Since 
the fixing caused the change of truth value of C*[Z*] 
from True to False, it must be the case that there is 
an instance I* of P appearing in C*[Z*] such that 
Ij^ [Z*] = P(d) and such that I* is -ve in ip. Further 
Il l3 [Z*] was earlier (i.e. before the fixing) assigned 
value False (making its corresponding literal True) and 
every other literal in C* [Z*] is assigned value False. 

We firstly note that I* ^ P since they are of oppo- 
site polarities. If C* ^ C, then P and I* are two 
instances of P of opposite polarity appearing in differ- 
ent clauses, which had earlier (i.e. before the fixing) 
conflicted. But in the analysis shown above we know 
that this cannot happen. Then C* — C. But then by 
case (3b) of V\, P M [Z*] would be assigned True in 
M 3 . But this contradicts the conclusion made above 
that the literal corresponding to [Z*] was the only 
literal in C*[Z*] that made the latter True. 

Thus, by fixing the value of P(d) to True, the conflict 
is eliminated and further for every clause C in ip and 
for every valuation Z of z, C[Z] continues to remain 
True so that 93(a) continues to be True in the new M 3 
which is cured of one conflict. 

Since M3 is of finite size, there are only a finite num- 
ber of conflicts and the curing process above elimi- 
nates conflicts one at a time while still preserving the 
truth of 93(a) in the new M3 obtained after the curing. 
Then this process terminates, giving a fully cured A/3 
which we call M' 2 such that M' 2 has no conflicts in it 
at all (and hence is a valid S— structure) and such that 
AI2 |= 95(a). We thus note that M 2 has been obtained 
by simply resolving all the conflict cases in M 3 and 
retaining the truth values of all predicates for all their 
arguments for which there is no conflict. 

Completing the proof 

With a last remaining argument now, we show that with this 
M 2 , satisfies the last condition of the EBS definition. 
For the proof to complete we need to show that M 2 1 a = 
M 2 \ a (recall that M 2 is the substructure of M generated 
by Um 2 )- Since a can contain only nullary, unary, free and 
existential predicates, we will consider each of these sepa- 
rately. 

1. Nullary predicates: From case (1) of Selector, all the 
elements of C are interpreted in M3, and hence in M 2 , 
with the same values as they are interpreted in M. 
Thus M^lc = M 2 \ c . 



2. Free and universal predicates: For a free or universal 
predicate P of arity > 2, using Lemma [TTT 2). P 2 , case 
(3a) of V\ and the conclusion made above that there 
are no conflicts on free and universal predicates, we 
can conclude that M 3 |{p} = M 2 |{p}. Since in M 2 is 
obtained from M3 simply by fixing the conflict cases 
and retaining the truth values of all predicates for all 
their arguments for which there is no conflict, we con- 
clude that M^\ {P} = M 3 \ {P} = Mi I {P} . 

3. Unary predicates: For P G U, for the following cases 
its is easy to see that M \= P{e) iff M 3 |= P(e): 
(i) P(e) is assigned the truth value by P 2 (ii) P(e) = 
Im 3 [Z] for some valuation Z of the universal variables 
and some instance I of P which is free or universal. 

If P(e) = Im 3 [Z] where / is existential, then for 
e G Val(Free), it is easy to see from Lemma [TTT D 
and case (2) of Vi, that M |= P(e) iff M 3 \= P(e). 
Else e = a c for some colour c. Then if Im[Z] = 
P(di), we have already seen above that <ii and a c 
have the same colour c in A/. Putting this together 
with the fact from case (2) of V\ that M |= 7 M [Z] iff 
M3 |= 7m 3 [Z], we have that P(e) has the same truth 
value in M and A/3. Thus in all cases M (= P(e) 
iff M3 |= P(e). Since there are no conflicts on unary 
predicates, M^\^py = M 2 \{p}- Further since M 2 is 
obtained from M3 simply by fixing the conflict cases 
and retaining the truth values of all predicates for all 
their arguments for which there is no conflict, we con- 
clude that I {pj = M 3 |{ P } = A/ 2 |{p}- 

We conclude from the above that M 2 \ a = M 2 \ a and indeed, 
that completes the proof! ■ 

8.2 Some observations about the EDP 
class 

We can see that both BSRs and Ls without equal- 
ity (i.e. just the Lowenheim class) lie wholly within 
EDP S (S). In case of cp e BSR S , EV(ip) = and 
hence it contains no existential predicates at all. Hence 
all the conditions of the EDPs(S) definition are trivially 
satisfied. In case of a sentence tp in Ls without equality, 
it contains no predicates of arity > 2 and no equality 
too. Hence all conditions of the EDPs(S) definition are 
again trivially satisfied. Thus BSR S C EDP S (E) and 
L E without equality C EDP S (S). 

Let for sets A, B of sentences, A C B denote that A is 
semantically contained inside B i.e. every sentence in A 
is semantically equivalent to some sentence in B. We then 
have the following. 

Theorem 5 1. If o x C a 2 C S, then EDP S (<r 2 ) C 
EDPe(o-i). 



2. EDP E (a) = EDP s (o- U U). iu 

3. Given <J\,(J2 Q S, if o\ \ <Ji contains 

(a) Only unary predicates, then EDPx;(er2) C 
EDP E (cr 1 ). 

(b) A predicate of arity > 2, then EDPe(ct2) % 
EDP S (<ti). 

Proof: Statements (1) and (2) above are easy to check and 
statement (3)(a) follows from (1) and (2). For 3(b), let P 
be the arity > 2 predicate. Then consider the sentence <j> as 
seen in the proof of case 1 of Theorem|2]|2]i (in section |4~T1 i. 

<t> = (A Qe s\{p} VzqQ(zq)) A {Mx3yP(x,y,y, ...,y)) 
In PCNF, one can check that </> e EDP S (S \ {P}) and 
hence <fi G EDPs((T2)- But as shown earlier, for any ip 
equivalent to 0, ij> ^ EBSs(ci) and hence by Corollary [4] 
(in sectionlO, -0 ^ EDP s (cri). ■ 

Analogous to £BS^, we define £T>Vs = 
{EDP E (<t) cr C £}. Then from Theorem 15112] ), 
fPPs = {EDP S (U Uff)|ffC(S \ U)}. Then we have 
the following. 

Corollary 5 {£T>V^ , E) u fl lattice which is isomorphic to 
the powerset lattice (p(S \ U), C). 

Proof: From Theorem |5j[3]l, we know that 
EDP E (U U cri) ^ EDP S (U U cr 2 ) for cti ^ a 2 
where cri, a 2 C (E \ U). Consider / : £BS S p(S \ U) 
such that /(EDP S (U U a)) = S \ a. f can be seen to be 
a bijection. 

Now if /(EDP S (U U cti)) C /(EDP S (U U <r 2 )), then 
(T2 E ci and hence by parts (fl]i and (fJJ of Theorem 
UJ EDP S (U U cri) C EDP S (U U a 2 ). Conversely if 
EDP E (U U cti) C EDP S (U U (7 2 ), then since cti and 
(72 cannot contain any unary predicates, by Theorem 
I5J3}, it must be that (72 \ cri is empty. In other words, 
/(EDP S (U U cri)) C /(EDP S (U U cr 2 )). Thus / is an 
isomorphism from £BSs to p(S \ U). ■ 

The lub(\J) and glb(F\) operators in (EVPs, C) are defined 
as: EDP s (ffi) U EDP S ((7 2 ) = EDP s ((7i n cr 2 ) and 
EDP s ((7i) n EDP s (cr 2 ) = EDP s ((7i U cr 2 ). Note 
that EDP s (cri U ct 2 ) C (EDP s (cti) n EDP s (cr 2 )) and 
(EDP s (ai) UEDP s (o- 2 )) C EDP s (ai n <r 2 ). 

Finally the following result shows that except under certain 
conditions, EDPs(ct) is not a syntactic characterization of 
EBSe(c) in general. Below A C B means A C B but 
B % A. Also = means 'semantic equivalence' i.e. A = B 
iff A C PandP C A. 

Theorem 6 1. If 12 contains only unary predicates, 
EDP s (cr) = EBS S (a) ^ BSR S /or alia C S. 



2. IfYi contains a predicate ofarity > 2, then 

(a) EDP S (S) = EBS E (S) = BSR S . 

(b) IfTi\a contains atleast one unary predicate, then 
EDP E (cr) C EBS s (er). 

Proof: Part[T| above follows from Theorem[2][3]) (of section 
|4~TT i and Corollary @] (of section [Oil. Part [2] follows from 
Theorem[T](of sectionfj]) and CorollaryH] Forpart[2] let U 
be the said unary predicate. Let P g £ be a predicate of 
arity > 2. Then consider the sentence <fi used in the proof 
of case (2) of Theorem E0. Now 4> £ EBS s (er). But 
suppose it is equivalent to ip 6 EDP^er). By Theorem 
15121 and Corollary H ip E EBS s (cr U U). But then from 
the proof of case (2) of Theorem [20, ip cannot be in any 
EBSs(o"i) where a\ contains U. ■ 

We do not know whether EBSs(ct) strictly semantically 
subsumes EDPj (a) when £\<r does not contain any unary 
predicate. 

8.3 Extensions of the EDP s (ct) class 

8.3.1 Relaxing the last condition of EDP S (a) 

Consider the last condition in the EDPs(er) definition 
disjuncted with the following condition: 

For a predicate P of arity > 2, for every pair of distinct 
instances of P, atleast one of which is existential, either 
(a) the two instances are existentially distinguishable 
w.r.t. v £ E\j or (b) the two instances are existentially 
distinguishable w.r.t to every variable in E\ t % where E\£ 
is the set of all the Ejj variables appearing as arguments in 
the two instances. Then the bound in this case is given by 
£=|T^)| + |^| + |£u|-2 fe . 

Proof: 

We refer to the proof of Theorem |4] as given in section 
18.11 We will need expand the initial substructure M\ by 
making only the following changes. We choose Val(Free) 
and Val(-E'u) as before. For any colour c, A c however is 
chosen as follows: Consider the set V% t as defined in the 
proof. Let \E\j\ = p. If \V%[\ < p, then choose A c = 
(in this case we call A c to be a 'small partition'). Else 
let a^,..., a? be p distinct elements of Vj^ where £\j = 
{vj 1 , . . . , Vj p }. Then choose A c = {a^ , . . . , a| } (in this 
case we call A c as 'a subset of a large partition'). As before, 
let Mi be the substructure generated by Val(Free), Val(I?u) 
and Uce{o,i}* AC - Then 

\U M \ < |Val(Fr ee )| + |Val(^)|+S ce{0il}fc |^ c | 
< \V{<p)\ + \Et\ + \E u \-2 k 
so that B = \V{<p)\ + \EZ\ + \E u \- 2 k . 



Let Z be an instantiation of the universal variables. We 
modify Selector (which chooses the values to be assigned 
to Vi £ E\j) as follows. Let d be the value from M chosen 
for Vi . 

1. If d G Val(Free), this same value is chosen in M3. 

2. Else, let c be the colour of d in M. We have two suit- 
cases here. 

(a) If d is from a small partition, then d itself is chosen 
as the value for Vi 

(b) Else a\ is chosen as the value of Uj. 

Consider an instantiation Z of the universal variables. Sup- 
pose P satisfies the condition above. Then for such a P, we 
perform the assignment of truth values to the (instantiated) 
instances of P in ipM 3 [Z] as follows: for each instance I of 
P in ip, Im 3 [Z] is assigned the same truth value in M3 as 
Iai[Z] is assigned in M (This kind of assignment is only 
for P which satisfies the above condition. For existential 
predicates R of arity > 2 which satisfy condition (3) of the 
'basic' EDP definition, the assignment is as given in the 
proof of Theorem[4]of section [8~TT >. 

All that we need to show now is that this assignment does 
not produce any conflicts for P. 

Suppose two instances conflicted. Let P Ma [Zt] and 1^ [Z/] 
be the conflicting instances. Then P M3 [Z t ] = 1^ [Z j] = 
P(d) (say) and w.l.o.g. assume that A/3 |= P M [Z f ] while 

M3 \= -il^f [Xf\. If P and P are free or universal in- 
stances in ip, then by Lemma fTTI (appearing in the proof of 
Theorem©, 7^[Z t ] = P M [Z t ] and I f Ms [Z f ] - I f M [Z f }. 
Further by our assignment of truth values above, M3 |= 
J^ 3 [Z a ] iff M (= [Z Q ] for a e {t, /}. Then this would 
produce a conflict in M itself which we know is absent. 
If atleast one of 7* or V is existential, then we have the 
following cases: 

1. P and J* are existentially distinguishable w.r.t. v £ 
E\j . Then in this case a conflict cannot occur by a sim- 
ilar reasoning as in the proof of Theorem|4] 

2. For each v G E\j, the i th argument of P is v iff the 
i th argument of I* is v (i.e. no v existentially distin- 
guishes P and if). Then as per the new condition, P 
and if are existentially distinguishable w.r.t. all vari- 
ables in Et j where E t j is the set of all E\j variables 
that appear as arguments in P and P . 

Suppose all the E\j variables in P Ms [Zf] and P M [Zf] 
take values from a small partition. Then from case (2) 
of Selector above, each E\j variable in P takes on the 
same value in P M [Zf] as in P M [Z t ]. Likewise for J*. 
If the I th argument of P is v E E\j, then so is the i th 
argument of I* . Putting together these observations 
with the fact that P M [Zf] = P M [Zf], we can infer 



that P AI [Z t ] = 7^-[Z/]. But since the truth values are 
preserved for corresponding instances in V'a/[Z] and 
ipM 3 [Z], we conclude that there must be a conflict in 
M itself which we know is absent. 
The case remaining is that there is some Ey variable 
Vi in E t j that takes on a value from a subset of a large 
domain i.e. vi is assigned a value of the form af . Sup- 
pose Vi appears as the g th argument of P. Then the 
g th argument of P M [Z*] is a\ . Now since P and I* 
are existentially distinguishable w.r.t. Vi, the g th argu- 
ment of I* is either (a) x £ Free or (b) v £ E\j or 
(c) £ -Eu where j 7^ i. Then the g*' 1 argument of 
Ij£ [Z j] is either (a) a value from Yal(Free) or (b) a 

value from Val(-Eti) or ( c ) a value from a small parti- 
tion or a value of the form (which is not equal to a\ 
as j ^ i. In each of these cases, we can see that the 
g th argument of P M [Z/] cannot be a\. Then P M [Z t ] 
and [Z f] do not conflict in the first place. 

Thus in each case we have shown that conflicts are not pos- 
sible at all. 

Note that since the colour of the value assigned to Vi in 
ipM [Z] and ipM 3 [Z] is the same, the argument given for the 
unary predicates in the 'Completing the proof section of 
the proof of Theorem|4] would still hold. ■ 

8.3.2 Relaxing the equalities 

1. If equalities are also allowed between free and Ey 
variables (in addition to the ones given in the EDP 
definition), then the bound remains the same as the one 
given in Theorem|4|i. 

Proof: 

We use the same construction as given in the proof of 
Theorem |4] in section 18.11 and show below that it also 
handles the case of equalities mentioned above. Consider 
the case when equalities are also allowed between free and 
E\j variables. Suppose the equality x = Vj occurs in some 
clause where x £ Free and Vj £ E\j. Now according to 
our choice of the values for variable Vi £ Ey given an 
instantiation Z of the universal variables, if in the model 
M, it took on the value in \al(Free), then in the model M3, 
we choose the same value for it. Thus the equality x = u, 
evaluates to the same truth value in M3 as it does in M. 
If Vi took on a value d £ Val(Free), then x — Vi would 
evaluate to False in M. In M3, i>i would be assigned the 
value a c where c is the colour of d in M. Since a c £ A c 
and A c n Val(Free) = 0, a c £ Val(Free) and hence x = Vi 
would evaluate to False in M3 as well. Thus in either case, 
we find that the equality x = Vi evaluates to the same truth 
value in M3 as it does in M. Thus the choice of Vi as done 
by Selector handles the case of equalities between free and 



E\j variables as well. ■ 

2. If equalities are also allowed between two E\j variables 
(in addition to the above equalities), then the bound is given 
byB=|^)| + |^| + |^ u |-2 fe . 

Proof: 

Consider the case when equalities are allowed between two 
Ey variables. We will need expand the initial substruc- 
ture Mi as constructed in the proof of Theorem @] by 
making only the following changes. We choose Val(Free) 
and Val(-Eu) as before. For any colour c, A c however 
is chosen as follows: Consider the set as defined 
earlier. Let \E\j\ = p. If V£f < p, then choose 
A c = V%[. Else let a^, . . . ,a^ p be p distinct elements 
of V\. { where E\j = {vj i: . . . , Vj }. Then choose A c = 

|a$ , . . . , aS }. As before, let Mi be the substructure gen- 

l ji jp j ° 

eratedby Yal(Free), \al(E^) and LU{o,i} fc A ' '■ Then 

\U M \ < |Val(,Fr ee )| + |Val(^;)|+I] ce{0il}fc |A c | 
< |l/((^)| + |^;| + |^u|-2 fe 

so that B = \V(<p)\ + |Su| + \Eu\- 2 k . 

Let Z be an instantiation of the universal variables. We 
modify Selector (which chooses the values to be assigned 
to Vi £ E\j) as follows. Let d be the value from M chosen 
for Vi . 

1. If d £ Val(Free), this same value is chosen in M3. 

2. Else, let c be the colour of d in M. We have two suh- 
cases here. 

(a) If Vi is assigned a value which is different from the 
values assigned to the other vj's where Vj £ E\j, then 
choose a\ for Vi in M3. 

(b) Let V be the set of all those Vj 's which have been 
assigned the same value as Wj. Then let i* be the least 
index appearing as subscript of some variable in V. 
Then choose for Vi in M3. 

We will now show that by the choices made as above, the 
new kinds of equalities in ipM 3 [Z] will also evaluate to the 
same truth value in M3 as the corresponding equalities in 
ipM [Z] evaluate to in M . 

Suppose the equality x = Vi occurs in some clause where 
x £ Free and i'i £ E\] . Now according to our choice of 
the values for variable Vi £ E\j given an instantiation Z of 
the universal variables, if in ?/>m[Z], it took on the value 
in Val(Free), then in the ipM 3 [Z] also the same value is 
chosen for it. Thus the equality x = vi evaluates to the 
same truth value in M3 as it does in M. If Vi took on a 
value d ^ Val(Free), then x = u, would evaluate to False 



in M. In M3, V{ would be assigned a value in A c which is 
disjoint with Val(Free). Hence x = i>i would evaluate to 
False in M 3 as well. Thus in either case, we find that the 
equality x = Uj evaluates to the same truth value in M3 as 
it does in M. 

Suppose the equality w, = Vj occurs in some clause where 
Vi, Vj S E\j. Suppose in ipM [Z], Vi and Vj are assigned the 
same value. Then from case 2(b) of the modified Selector 
above, we know that in ipM 3 [Z] too, Vi and Vj would 
be assigned the same value. If Vi and Vj were assigned 
different values in ^/[Z], then they would be assigned 
different values in iI>m 3 [Z] as well. If not then say a% is 
the common value assigned to both in tpM 3 [Z]. Then from 
case 2(b) of Selector, it must have been the case that Uj was 
assigned the same value as Vk (where Vk is the least indexed 
variable in the set of all the E\j variables whose values in 
-0a/[Z] were the same as i>j) and also Vj was assigned the 
same value as Vk in ^m[Z]. Then Vi and Vj were assigned 
the same value which contradicts the assumption made 
above. Thus in either case Vi = Vj evaluates to the same 
truth value in M3 as it does in M. 

Note that since the colour of the value assigned to Vi in 
tpM [Z] and ipM 3 [Z] is the same, the argument given for the 
unary predicates in the 'Completing the proof section of 
the proof of Theorem|4]would still hold. ■ 

Conjecture: 

Generalising EDP with the conditions 1 and 2(b) above 
together, the bound is given by 

B=\V{ V )\ + \W>\ + \Eu\-2 k 

8.3.3 Extension to an order-sorted logic 

There has been recent work ((8)) on extending BSR to 
order-sorted logics. EDPs(<r) being an unsorted logic 
which is orthogonal to the extension presented in [81, these 
two extensions can be combined to yield syntactic gener- 
alizations of BSR which subsume each of the individual 
extensions. 

8.4 The Lowenheim class with equality 

For the Lowenheim class with equality, the bound B in 
general is q.2 k (where q is the length of the quantifier 
prefix) Q. But this class, being a special case of the 
EDPs(S) class, from the above results, we get the fol- 
lowing finer bounds for the Lowenheim class with equality 
for different cases of equality. 



1. For the Lowenheim class extended with equality! 
where the equalities are either between (a) two free 
variables or (b) two universal variables or (c) a free 
and a universal variable or (d) a free and an E\j vari- 
able, the bound (on the size of the sub-model) is given 
by 6= \V(tp)\ + 2 k . 

2. For the Lowenheim class extended with equality, if in 
addition to the above kind of equalities, equalities be- 
tween E\j variables are also allowed, then the bound is 

givenby6=|y((^)| + |Su|-2 fc . 

8.5 Complexity of the SAT problem for 
EDP 

The bounded model property of EDPs(cr) allows us to 
also characterize the complexity of its SAT problem. 

Theorem 7 The satisfiability problem for EDPs(cr) is 
NExpTiME-comp/e/e. 

Proof: Indeed EDPs(<r) satisfies the two conditions of 
Corollary |2](appearing towards the end of section l53l i: (a) 
The bound B for a sentence 6 EDP s ((t) is < 2°^\ 
Then f{4>), as defined in Lemma [8] (of section I5.31 l. is 
efficiently (polynomial time) computable and such that 
f{4>) < 2 C WD. (b) EDP s (cr) contains BSR S (since 
BSR S C EDP S (E) C EDP s (cr)). ■ 

An interesting consequence of the above result is that since 
the satisfiability checking problem for both BSRs and 
EDP S (a) is NExpTlME-complete for all a C S, it 
means that there is an efficient reduction from EDPs(0) 
to BSRs which yields a BSRs sentence which is equisat- 
isfiable with a given EDPs(0) sentence. There is some re- 
cent work ( |3|) on improved heuristics in deciding BSRs 
sentences. Finding an efficient reduction from EDPs(0) 
to BSRs would therefore help us get better heuristics to 
decide EDPv(0) sentences as well. We present one such 
reduction in SectionfTOl 

9 Closure Properties of SBS^, and SVVy, 

For S which contains only unary predicates, EBSs(cr) = 
EDP S (a) = FO s . Clearly then EBS E (cr) = EDP E (cr) 
are closed under A, V and -1. 

Hence below we consider S to have atleast one arity > 2 
predicate. 

9.1 Closure properties of EBSt, 

Consider ifi 6 EBSs(ci)- Let Bi,B2 be the bounds for 
<pi , if2 respectively. 



1) A— closure 



1) A— closure 
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Let tp = (pi A (f2. Assume a\ = a<z = £. 
Suppose M \= p. Then M \= Lp i . Then there exists a 
substructure M$ i of M such that 1 1 < which 
satisfies the EBSs(E) conditions for Then let Mi 
be the substructure of A/ generated by Um 1a U Um 2 ,i- 
Consider any extension M2 of M\ within M, Since A/2 
extends Af^i, A/2 |= <y9; (this is because G EBSs(<Ti))- 
Then M 2 h ¥>■ Thus P 6 EBS S (E). The bound B of 97 is 
not more than \Um 1 | which is < B\ + B-2- 
However suppose w.l.o.g, <Ti is not E. Then while con- 
sidering any common extension M2 of Mi 1 and M24 
(mentioned above), to satisfy tpi, in general, we might have 
to interpret the S \ u\ predicates in a way which might 
conflict with the way these predicates are interpreted in 
trying to satisfy tp2 . 

2) V— closure 
Let tp = (pi V if2- 

Suppose M \= tp. Then suppose M \= tp x A —1^2 ■ 
Then consider M\ as A/1.1 mentioned above. Then any 
extension M2 of M\ within M satisfies <p\ and hence tp. 
If M |= <p2 A -1931 then consider M\ as A/2,1 mentioned 
above. Then any extension A/2 of M\ within M satisfies 
tp2 and hence tp. Thus in either case A/i is such that 
I^Mil < max{£>i, £>2}- Further, the interpretations of the 
o\ H <T2 are guaranteed to be preserved when extending 
Afi,! or A/2,1. Hence tp G EBSs(cri n 02). The bound for 
tp is B = \U Ml \ < max{23i,23 2 }. 

3) -1— (non)closure 

Consider the following sentence in the vocabulary £ = 
{£?} where P is a 2-ary predicate (If £ contains a higher 
arity predicate, then that can simulate a 2-ary predicate and 
hence we can construct an example in that case too similar 
to the one shown below). 

$ = Vx^E(x, x) A \/x3y {{x =/= y) A E(x, y))A 
\/xVyVz(E(x, y) A E(y, z) -> E(x, z)) 
= \/x\fy\fz3w 

(-iE(x, x) A (E(x, y) A E(y, z) -> E(x, z))A 
(x ^ w) A E(x, w)) 

We can see that the models of this sentence are infinite 
DAGs. Then $ £ EBS s (0). Now $ is a V*3* sen- 
tence and its negation is an 3*V* sentence which belongs 
toBSRs C EBS S (E). 

9.2 Closure properties of EWt, 

Consider tp = p 1 A tp 2 where tpi G EDPs(o-j). 



Let tp = tp\ A tp2. 

Let a* be the set of all unary, free and universal predicates 
appearing in tpi. Assume a\ = = E. Then there are no 
existential predicates in both tp 1 and tp 2 . Then in tp, firstly 
rename the variables of tp 2 so that they are completely 
disjoint with those of tpi and bring tp in PCNF with the 
leftmost 3 quantifiers of tp being leftmost 3 quantifiers 
of tp 1 and tp2 and the matrix of tp being the matrices of 
pi and tp 2 conjuncted. Then V(tp) = V(tpi) U V{tp2). 
The predicates which were free or universal in tp\ or tp2 
continue to remain so in p since the free or universal nature 
of each instance of tp\ or tp2 remains unaffected upon the 
conjunction since we made the variables of tp\ and tp 2 
disjoint. Thus T = T\ U T% and A = A\ U A2. Also 
clearly U = Ui U U2 i.e. the unary predicates U of tp are 
those that appear in tp\ (i.e. Ui) or those that appear in tp 2 
(i.e. U 2 ). ThenS = a\ = crj = a\ UcrJ = UUJ'U.A C S. 
Since equality G Ti U Ai, we have that in tp, equality 
G J- U A Since there are no existential predicates in tp u 
there are none in p as well. Thus tp G EDPs(S). 
However suppose w.l.o.g a\ ^ E. Then consider the fol- 
lowing sentences: tpx = \/x3yP(x, y) , tp2 — Vx—iP(x t x). 
Then bringing tp into PCNF as explained above, we have 
tp = \/zVx3y(P(x, y) A _| -P(z, z)). These two instances are 
not existentially distinguishable w.r.t. y - the only variable 
in Eij. Then tp ^ EDPs (er) for any a C E. (One can 
construct a similar example for any other E which contains 
atleast one arity > 2 predicate.) 

2) V— closure 

Let tp = tpi V p2- 

Assume al = ovj = E. Then again there are no existential 
variables at all. Then by the same argument as above, it is 
easy to see that p G EDP E (E). 

However suppose w.l.o.g u\ 7^ E. Then consider the 
following sentences: 

tpi = yx3y(P(x, y) A P(x, x)) ; tp 2 = Vx-iP(a;, x). 

Then bringing tp into PCNF as explained above, we have 
tp = \/zVx3y(P(x, y) V -.P(z, z)) A (P(x, x) A ^P{z, z)). 
Now P(x,y) and ^P(z,z) appearing in the first and 
second clauses respectively differ in polarity. But these two 
instances are not existentially distinguishable w.r.t. y - the 
only variable in E\j. Then tp ^ EDPs(cr) for any a C E. 
(One can construct a similar example for any other E which 
contains atleast one arity > 2 predicate.) 

3) -1— (non)closure 



Consider p = 3x s iy{P{x,y) V -iP(y,y)). Now p G 
EDP S (S). But in -,tp = \/x3y{^P{x,y)) A (P(y,y)), 
the two instances are not existentially distinguishable w.r.t. 
y - the only variable in Ey. Then tp EDPs(ct) for any 
aCE. (One can construct a similar example for any other 
S which contains atleast one arity > 2 predicate.) 

10 Spectral Properties of EDP s (0) and Ap- 
plications 

Consider an EDPs(0) sentence 

tp = Vzo3wiVzi3t!2Vz2 . . . 3v r Vz r £(z, v\ . . . , v r ) 

where z = (zo, ...,z r ) and £ is quantifier- free. Let B be 
the bound for <p as given by Theorem [4] (of section [8~T1 >. 
and let X = {x%, X2, ■ ■ ■ xb} be a set of B fresh variables. 
In addition, let ip be the BSRs formula defined as follows. 
ip = 3x\ . . . 3.tbVzoVzi . . . Vz r (x) where 

where £(z, v\ \-¥ Ui, . . . , v r h-> u r ) is the formula obtained 
by replacing every occurence of Vi in £ by Uj. 

Theorem 8 77je spectrum of p equals the spectrum of ip. 

Proof Sketch: It is straightforward to see that every model 
of ^ is also a model of tp. Therefore, the spectrum of tp is 
contained in that of p. 

For the other way round, consider a model M of p. The 
technique used in the proof of Theorem |4] of section 18.11 
can now be used to construct a model M' of p such 
that Um = Um' and M \ a = M' \ a . Furthermore, the 
construction guarantees that when p is evaluated on M', 
all existentially quantified variables can take values from 
a fixed subset V C Uu> such that \V\ < B, and yet cause 
p to evaluate to True. This special property of M' ensures 
that M' \= ip as well. Since Um = Um', this proves 
that the spectrum of p is contained in the spectrum of ip- 
Hence, <p and ip have the same spectrum. Note that ip is not 
semantically equivalent to p. It is certainly equisatisfiable 
to tp, but is also "equispectral" to tp. M 

An immediate application of Theorem [8] in SMT solving 
stems from recent results due to Fontaine 0. In (4), a no- 
tion of gentle theories is introduced and it is argued that 
BSR, Lowenheim and FO 2 (FO with two variables) the- 
ories are gentle. Intuitively, a gentle theory is one in which 
one can completely express the spectrum. Fontaine further 
shows that gentle theories can be combined with almost any 
other decidable theories in an SMT solving setting with co- 
operating decision procedures for multiple theories. From 
Theorem[8] we know that for every p G EDPs (0), we can 
effectively construct a BSR formula ip that has the same 



spectrum as p. Since BSR has been shown to be a 
tie theory in fl4], this implies that EDPs(0) is gentle as 
well, and can be combined with other decidable theories for 
SMT solving. From Theorem[5](in section [8^21 and the fact 
that EDP S (S) contains BSR S , we know that EDP s (0) 
semantically generalizes BSRj> Hence, EDPs(0) is a 
semantically richer theory than BSRs that is still gentle. 
Interestingly, Fontaine gives separate proofs of gentleness 
of the BSR class and of the Lowenheim class with equal- 
ity J4]. Since Loweheim class with equality is contained in 
EBS S (E) with the bound B = q.2 k (q = number of quan- 
tifiers, and k = number of distinct monadic predicates), 
Theorem Q] (of section and its proof allow us to effec- 
tively construct a BSR formula that is semantically equiv- 
alent to a Lowenheim formula with equality. Hence a gen- 
tleness proof of BSR suffices to prove that the Lowenheim 
class with equality is also gentle. Section [8?4l also describes 
how EDP E (E) (and hence EDP s (0)) contains and in- 
deed generalizes the Lowenheim class with equality. We, 
therefore, believe that EDPs(0) and its variants truly ex- 
pand the set of gentle theories, and permit SMT solving 
with cooperating decision procedures on richer problems. 
Note that satisfiability checking for formulas in EDPs(0) 
can be reduced to the satisfiability checking problem of the 
equispectral BSR S formula. Model-finding of EDP s (0) 
formulas can be done in the same way as is done for BSRs 
formulas U). 

Yet other interesting applications of the EDPs(0) class 
arise in bounded model checking and inductive property 
checking. Consider a (possibly infinite) state transition sys- 
tem whose transition relation is given by a first order logic 
formula T(s, s') on current and next state variables s and s' 
respectively. Let 7(s) and P(s) be predicates on state vari- 
ables denoting the initial set of states and the set of states 
with property P. In the classical bounded model checking 
problem, we wish to find if there exists a run of the sys- 
tem for k steps, starting from an initial state and ending in 
a state satisfying P. This can be posed as the satisfiability 
checking problem of the sentence: 

p bmc = 3s ... 3s k I(s )AT(s , si)A. . . T(s k - 1 ,s k )AP(sk) 

Similarly, in inductive property checking, we wish to find if 
there exists a run of the system for k steps, starting from a 
state satisfying P such that P is violated for the first time in 
the k th step. This is equivalent to checking the satisfiability 
of the sentence: 

p md = 3s ...3s k P{s )AT{s ,si)AP{s 1 )... A 
P(s fe -i) AT(a fc _i,* fc ) A-P(s fe ) 

It can be shown that if I(s), T(s, s'), P(s) and _| P(s) are 
in EDPs(0), then one can obtain the size of a bounded 
model for both pbmc and Pmd from the bounds B for I(s), 



T(s, s'), P(s) and ->P(s). The "extensible" bounded sub- 
model property of EDPs(0) formulae ensures that the 
bound of the model size for <Pb mc and tp ind grows slowly 
(linearly) with k. The reader is referred to (9) for further 
details. 

11 Conclusion 

In this paper, we presented a semantic and syntactic gener- 
alization of the widely used BSR class of first order logic 
sentences. Our study showed a lattice-structured general- 
ization both in the semantic and syntactic domains with 
strict inclusions between classes of formulae. The semantic 
generalization subsumes all FOs formulae with finite and 
co-finite spectra in the limit. We also showed that several 
well known decidable classes of FOs sentences are sub- 
sumed by our generalization. This gives rise to alternative 
proofs of some interesting results. The syntactic general- 
ization enjoys special spectral properties, that can be ef- 
fectively used in applications like SMT solving, bounded 
model checking and inductive property checking. There 
are several open questions that still remain. Most important 
among them is the question of whether a syntactic charac- 
terization of EBSs(0) is possible in the same sense that 
BSRs syntactically characterizes EBSs(S). Identifying 
other useful fragments for which membership is decidable, 
and the bound B is efficiently computable presents yet an- 
other major challenge for future work. 
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